First VPN had assets seized in First VPN takedown
Law Enforcement
Summary
Hide ▲
Show ▼
Authorities took down First VPN, a ransomware-linked service used to hide cybercrime activity, in a coordinated action led by France and the Netherlands. The operation ran from May 19 to 20 and dismantled 33 servers while seizing 3 domains. Investigators also interviewed the administrator during a house search in Ukraine.
Related Happenings
1VPNS takedown in Operation Saffron
Law Enforcement
H score26
First: 14.07.2026 12:40
Last: 14.07.2026 12:40
Sources 1
About this happening:
French and Dutch authorities took down 1VPNS, seized 33 servers, and arrested its administrator in Operation Saffron, disrupting a VPN service used by ransomware...
1VPNS takedown in Operation Saffron
Law EnforcementAbout this happening: French and Dutch authorities took down 1VPNS, seized 33 servers, and arrested its administrator in Operation Saffron, disrupting a VPN service used by ransomware...
Joint operation dismantles First VPN Service (1VPNS)
Law Enforcement
H score33
First: 14.07.2026 11:02
Last: 14.07.2026 11:02
Sources 1
About this happening:
European and North American authorities dismantled First VPN Service (1VPNS) in a ransomware-linked takedown, removing infrastructure used to hide attack origins and o...
Joint operation dismantles First VPN Service (1VPNS)
Law EnforcementAbout this happening: European and North American authorities dismantled First VPN Service (1VPNS) in a ransomware-linked takedown, removing infrastructure used to hide attack origins and o...
Operation Endgame takedown of Amadey and StealC infrastructure
Law Enforcement
H score66
First: 24.06.2026 18:02
Last: 24.06.2026 18:02
Sources 1
About this happening:
An international law-enforcement takedown under Operation Endgame disrupted shared infrastructure used by Amadey and StealC, with Microsoft, Europol, and i...
Operation Endgame takedown of Amadey and StealC infrastructure
Law EnforcementAbout this happening: An international law-enforcement takedown under Operation Endgame disrupted shared infrastructure used by Amadey and StealC, with Microsoft, Europol, and i...
Operation Endgame takedown of SocGholish and Evil Corp infrastructure
Law Enforcement
H score58
First: 18.06.2026 16:25
Last: 18.06.2026 16:25
Sources 1
About this happening:
International law enforcement disrupted SocGholish/FakeUpdates infrastructure in Operation Endgame on June 18, cleaning 14,971 compromised WordPress websites a...
Operation Endgame takedown of SocGholish and Evil Corp infrastructure
Law EnforcementAbout this happening: International law enforcement disrupted SocGholish/FakeUpdates infrastructure in Operation Endgame on June 18, cleaning 14,971 compromised WordPress websites a...
Europol-led AudiA6 crypto-laundering takedown
Law Enforcement
H score29
First: 11.06.2026 18:55
Last: 11.06.2026 18:55
Sources 1
About this happening:
Law enforcement dismantled AudiA6, a cryptocurrency laundering service used by ransomware gangs and other cybercriminal networks, in a June 10, 2026 multinatio...
Europol-led AudiA6 crypto-laundering takedown
Law EnforcementAbout this happening: Law enforcement dismantled AudiA6, a cryptocurrency laundering service used by ransomware gangs and other cybercriminal networks, in a June 10, 2026 multinatio...
Timeline
-
21.05.2026 18:30 2 articles · 1mo ago
First VPN had assets seized in First VPN takedown
Initial DisclosureBetween May 19 and 20, 2026, France and the Netherlands led a coordinated operation against First VPN, dismantling servers and seizing domains. The action began with a search in Ukraine that targeted the service's administrator and infrastructure.
Show sources
- Cybercriminal VPN Dismantled in Europol Crackdown — www.infosecurity-magazine.com — 21.05.2026 18:30
- First VPN Dismantled in Global Takedown Over Use by 25 Ransomware Groups — thehackernews.com — 22.05.2026 20:35