European Authorities Shut Down First VPN and Arrest Alleged Administrator
Summary
A multinational operation led by France and the Netherlands shut down First VPN, arrested its alleged administrator and took 33 servers offline. Investigators obtained the user database, with intelligence supporting 21 additional inquiries.
Key points
- France and the Netherlands led the two-day operation, with support from Europol, Eurojust and eight other countries.
- Authorities took 33 servers offline and seized multiple domains linked to First VPN.
- Investigators obtained the VPN's user database and identified connections they say were used by alleged cybercriminals.
- Officials said intelligence from the operation is supporting 21 additional investigations involving multiple countries.
- The alleged administrator was arrested and their residence in Ukraine searched; authorities did not identify the person.
Article Details
- Event Type
- Multinational law-enforcement takedown of a cybercrime VPN service and arrest of its alleged administrator.
- Impact
- Authorities took 33 servers offline, seized related domains, and obtained First VPN’s user database. Investigators said they identified thousands of users linked to cybercrime and VPN connections associated with alleged cybercriminals. Intelligence from the operation is supporting 21 additional investigations.
Indicators of compromise
| Type | Indicator | Context |
|---|---|---|
| DOMAIN | 1vpns[.]com | Domain seized as part of the First VPN service, which investigators said cybercriminals used to conceal their infrastructure and identities. |
| DOMAIN | 1vpns[.]net | Domain seized as part of the First VPN service, which investigators said cybercriminals used to conceal their infrastructure and identities. |
| DOMAIN | 1vpns[.]org | Domain seized as part of the First VPN service, which investigators said cybercriminals used to conceal their infrastructure and identities. |
People
Products
Countries
FranceEuropean authorities shut down First VPN and arrested its alleged administrator in a multinational operation led by France and the Netherlands, with support from Europol and Eurojust.NetherlandsEuropean authorities shut down First VPN and arrested its alleged administrator in a multinational operation led by France and the Netherlands, with support from Europol and Eurojust.UkraineAuthorities said they arrested the alleged administrator and searched their residence in Ukraine, but declined to name the person.