First VPN had assets seized in First VPN takedown
Law Enforcement
Summary
Hide ▲
Show ▼
Authorities took down First VPN, a ransomware-linked service used to hide cybercrime activity, in a coordinated action led by France and the Netherlands. The operation ran from May 19 to 20 and dismantled 33 servers while seizing 3 domains. Investigators also interviewed the administrator during a house search in Ukraine.
Related Happenings
Guardia di Finanza dismantles CINEMAGOAL piracy network
Law Enforcement
First: 23.05.2026 17:23
Last: 23.05.2026 17:23
Sources 1
About this happening:
Italian authorities **seized** **CINEMAGOAL** servers and dismantled a cross-border **takedown** of a piracy ecosystem that stole streaming authentication codes. The **Tutto Chiar...
Guardia di Finanza dismantles CINEMAGOAL piracy network
Law EnforcementAbout this happening: Italian authorities **seized** **CINEMAGOAL** servers and dismantled a cross-border **takedown** of a piracy ecosystem that stole streaming authentication codes. The **Tutto Chiar...
First VPN Service as criminal VPN infrastructure for ransomware and fraud operators
Threat Actor Meta
First: 22.05.2026 20:35
Last: 22.05.2026 20:35
Sources 1
How related:
First VPN, per Europol, offered services designed specifically for criminal use, allowing anonymous payments and a hidden infrastructure that enabled paying customers to hide their identities when carrying out ransomware attacks, large-scale fraud, and data theft.
About this happening:
**First VPN Service** functioned as a criminal VPN layer that let ransomware, fraud, and data theft operators hide their identities, expanding the reach and resilience of undergro...
First VPN Service as criminal VPN infrastructure for ransomware and fraud operators
Threat Actor MetaHow related: First VPN, per Europol, offered services designed specifically for criminal use, allowing anonymous payments and a hidden infrastructure that enabled paying customers to hide their identities when carrying out ransomware attacks, large-scale fraud, and data theft.
About this happening: **First VPN Service** functioned as a criminal VPN layer that let ransomware, fraud, and data theft operators hide their identities, expanding the reach and resilience of undergro...
First VPN takedown by Europol and French-Dutch authorities
Law Enforcement
First: 21.05.2026 16:09
Last: 21.05.2026 16:09
Sources 1
How related:
The disruption of First VPN Service was led by France and the Netherlands, with several other nations supporting the investigation since December 2021, including Luxembourg, Romania, Switzerland, Ukraine, the U.K., Canada, Germany, the U.S., Spain, Sweden, Denmark, Estonia, Latvia, Lithuania, Poland, and Portugal.
About this happening:
**Europol** and **French and Dutch authorities** took **First VPN** offline in a cross-border operation that also **seized servers** and **arrested the administrator**. The case m...
First VPN takedown by Europol and French-Dutch authorities
Law EnforcementHow related: The disruption of First VPN Service was led by France and the Netherlands, with several other nations supporting the investigation since December 2021, including Luxembourg, Romania, Switzerland, Ukraine, the U.K., Canada, Germany, the U.S., Spain, Sweden, Denmark, Estonia, Latvia, Lithuania, Poland, and Portugal.
About this happening: **Europol** and **French and Dutch authorities** took **First VPN** offline in a cross-border operation that also **seized servers** and **arrested the administrator**. The case m...
Europol-led arrests in Albanian scam call center fraud case
Law Enforcement
First: 30.04.2026 13:00
Last: 30.04.2026 13:00
Sources 1
About this happening:
**Europol** said a **two-year operation** ended with **10 arrests** at suspected **Albanian scam call centers**, disrupting a professionalized **investment fraud** network. Police...
Europol-led arrests in Albanian scam call center fraud case
Law EnforcementAbout this happening: **Europol** said a **two-year operation** ended with **10 arrests** at suspected **Albanian scam call centers**, disrupting a professionalized **investment fraud** network. Police...
Austrian-Albanian cryptocurrency fraud ring takedown
Law Enforcement
First: 29.04.2026 17:27
Last: 29.04.2026 17:27
Sources 1
About this happening:
Austrian and Albanian authorities **dismantled** a **cryptocurrency investment fraud ring**, escalating a cross-border cyberfraud case that allegedly caused **over €50 million** i...
Austrian-Albanian cryptocurrency fraud ring takedown
Law EnforcementAbout this happening: Austrian and Albanian authorities **dismantled** a **cryptocurrency investment fraud ring**, escalating a cross-border cyberfraud case that allegedly caused **over €50 million** i...
Timeline
-
21.05.2026 18:30 2 articles · 6d ago
First VPN had assets seized in First VPN takedown
Initial DisclosureBetween **May 19 and 20, 2026**, **France and the Netherlands** led a coordinated operation against **First VPN**, dismantling servers and seizing domains. The action began with a search in **Ukraine** that targeted the service's administrator and infrastructure.
Show sources
- Cybercriminal VPN Dismantled in Europol Crackdown — www.infosecurity-magazine.com — 21.05.2026 18:30
- First VPN Dismantled in Global Takedown Over Use by 25 Ransomware Groups — thehackernews.com — 22.05.2026 20:35