TL;DR
Law enforcement agencies across multiple countries successfully dismantled a criminal VPN service, arresting the operator and sharing intelligence that supports ongoing investigations. The operation highlights the risks of seemingly secure VPN infrastructure for cybercriminals.
Authorities from several countries announced the successful takedown of a criminal VPN service on May 19-20, arresting its administrator and dismantling 33 servers. The operation, supported by Europol and involving multiple jurisdictions, underscores law enforcement’s ability to penetrate encrypted networks believed to be secure by cybercriminals.
The operation targeted 1vpns.com, 1vpns.net, 1vpns.org, and related onion domains, which were used by cybercriminals for illicit activities. Europol reported that the investigation began in December 2021 and entered a new phase in November 2023, with international cooperation intensifying support for the crackdown.
During the operation, authorities conducted house searches in Ukraine, interviewed the VPN’s administrator, and seized 33 servers linked to the service. They also shared intelligence packages—83 in total—containing information on 506 users, aiding 21 ongoing investigations worldwide.
Why It Matters
This development demonstrates law enforcement’s increasing capability to identify and dismantle encrypted or anonymized platforms used by cybercriminals. It also highlights the importance of international cooperation in tackling transnational cybercrime, potentially deterring similar illicit operations in the future.
![Norton 360 Deluxe, Antivirus software for 5 Devices with Auto-Renewal – Includes Advanced AI Scam Protection, VPN, Dark Web Monitoring & PC Cloud Backup [Download]](https://m.media-amazon.com/images/I/51Ovcl9mAAL._SL500_.jpg)
Norton 360 Deluxe, Antivirus software for 5 Devices with Auto-Renewal – Includes Advanced AI Scam Protection, VPN, Dark Web Monitoring & PC Cloud Backup [Download]
ONGOING PROTECTION Download instantly & install protection for 5 PCs, Macs, iOS or Android devices in minutes!
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Background
The investigation into the VPN service began in late 2021, with a significant escalation in November 2023, supported by Europol and Eurojust. Prior to this, cybercriminals often relied on VPNs to obfuscate their activities, including password spraying, brute-force attacks, and network enumeration. The recent takedown reflects a broader trend of law enforcement targeting infrastructure believed to be secure but exploited for illegal purposes.
“With the infrastructure dismantled and the administrator under arrest, investigators across multiple jurisdictions are now using the intelligence gathered to support ongoing cybercrime investigations worldwide.”
— Europol
“The support from Eurojust helped French and Dutch authorities work closely together, exchange evidence, and decide on a prosecutorial strategy.”
— Europol
Mullvad VPN | 12 Months for 5 Devices | No-Log Security VPN Service | Protect Your Privacy
PRIVACY-FIRST VPN: This 12-month Mullvad VPN code gives you a full year of privacy protection without monthly renewals….
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
What Remains Unclear
It is not yet clear whether additional users of the VPN have been identified or if further arrests are planned. Details about the full extent of the network’s activity remain under investigation.
Mullvad VPN | 12 Months for 5 Devices | No-Log Security VPN Service | Protect Your Privacy
PRIVACY-FIRST VPN: This 12-month Mullvad VPN code gives you a full year of privacy protection without monthly renewals….
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
What’s Next
Authorities will continue analyzing seized data, sharing intelligence with international partners, and pursuing ongoing investigations related to the VPN’s users and associated cybercriminal activities. Legal proceedings against the administrator and possibly other users are expected to follow.
Deeper Connect Mini(2026 Version) Decentralized VPN Router Lifetime Free for Travel Home Enterprise-Level Cybersecurity Wi-Fi Router with Dual Antennas Wi-Fi Adapter
1. True VPN Router – Network Protection for Every Device: This VPN router secures your entire homenetwork at…
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Key Questions
What was the VPN service used for?
The VPN was used by cybercriminals for illicit activities, including network enumeration, password spraying, brute-force attacks, and hiding their identities online.
How did law enforcement manage to hack the VPN?
Authorities conducted targeted investigations, seized servers, and used intelligence gathered from the operation to identify and arrest the administrator, dismantling the infrastructure.
Are users of the VPN at risk now?
Users have been notified of the shutdown and informed that they have been identified; ongoing investigations may lead to further legal actions.
Will this stop cybercriminals from using VPNs?
This operation demonstrates that law enforcement can penetrate even seemingly secure VPN services, but cybercriminals may still seek alternative methods. Continued international cooperation is key.
Source: Ars Technica
