TL;DR
Get the latest gadgets delivered free with Prime
- Fast, free delivery on millions of items
- Prime Video, Amazon Music and more included
- Member-only deals all year
Law enforcement agencies across multiple countries successfully dismantled a criminal VPN service, arresting the operator and sharing intelligence that supports ongoing investigations. The operation highlights the risks of seemingly secure VPN infrastructure for cybercriminals.
Authorities from several countries announced the successful takedown of a criminal VPN service on May 19-20, arresting its administrator and dismantling 33 servers. The operation, supported by Europol and involving multiple jurisdictions, underscores law enforcement’s ability to penetrate encrypted networks believed to be secure by cybercriminals.
The operation targeted 1vpns.com, 1vpns.net, 1vpns.org, and related onion domains, which were used by cybercriminals for illicit activities. Europol reported that the investigation began in December 2021 and entered a new phase in November 2023, with international cooperation intensifying support for the crackdown.
During the operation, authorities conducted house searches in Ukraine, interviewed the VPN’s administrator, and seized 33 servers linked to the service. They also shared intelligence packages—83 in total—containing information on 506 users, aiding 21 ongoing investigations worldwide.
Why It Matters
This development demonstrates law enforcement’s increasing capability to identify and dismantle encrypted or anonymized platforms used by cybercriminals. It also highlights the importance of international cooperation in tackling transnational cybercrime, potentially deterring similar illicit operations in the future.
Products Worth Considering
Logitech MX Keys Combo for Business Keyboard and Mouse – Graphite
Apple MacBook Air 13.6-inch with M5 Chip, 16GB Memory, 512GB SSD, Sky Blue
Logitech MX Master 4 Ergonomic Wireless Mouse with Haptic Feedback, Graphite
As an affiliate, we earn on qualifying purchases.
Background
The investigation into the VPN service began in late 2021, with a significant escalation in November 2023, supported by Europol and Eurojust. Prior to this, cybercriminals often relied on VPNs to obfuscate their activities, including password spraying, brute-force attacks, and network enumeration. The recent takedown reflects a broader trend of law enforcement targeting infrastructure believed to be secure but exploited for illegal purposes.
“With the infrastructure dismantled and the administrator under arrest, investigators across multiple jurisdictions are now using the intelligence gathered to support ongoing cybercrime investigations worldwide.”
— Europol
“The support from Eurojust helped French and Dutch authorities work closely together, exchange evidence, and decide on a prosecutorial strategy.”
— Europol
What Remains Unclear
It is not yet clear whether additional users of the VPN have been identified or if further arrests are planned. Details about the full extent of the network’s activity remain under investigation.
What’s Next
Authorities will continue analyzing seized data, sharing intelligence with international partners, and pursuing ongoing investigations related to the VPN’s users and associated cybercriminal activities. Legal proceedings against the administrator and possibly other users are expected to follow.
Key Questions
What was the VPN service used for?
The VPN was used by cybercriminals for illicit activities, including network enumeration, password spraying, brute-force attacks, and hiding their identities online.
How did law enforcement manage to hack the VPN?
Authorities conducted targeted investigations, seized servers, and used intelligence gathered from the operation to identify and arrest the administrator, dismantling the infrastructure.
Are users of the VPN at risk now?
Users have been notified of the shutdown and informed that they have been identified; ongoing investigations may lead to further legal actions.
Will this stop cybercriminals from using VPNs?
This operation demonstrates that law enforcement can penetrate even seemingly secure VPN services, but cybercriminals may still seek alternative methods. Continued international cooperation is key.
Source: Ars Technica
