{"id":259069,"date":"2026-05-29T10:18:00","date_gmt":"2026-05-29T14:18:00","guid":{"rendered":"https:\/\/news-you-need.com\/index.php\/2026\/05\/29\/fbi-confirms-25-ransomware-groups-using-first-vpns-now-seized-services-heres-what-we-know\/"},"modified":"2026-05-29T16:40:48","modified_gmt":"2026-05-29T20:40:48","slug":"fbi-confirms-25-ransomware-groups-using-first-vpns-now-seized-services-heres-what-we-know","status":"publish","type":"post","link":"https:\/\/news-you-need.com\/index.php\/2026\/05\/29\/fbi-confirms-25-ransomware-groups-using-first-vpns-now-seized-services-heres-what-we-know\/","title":{"rendered":"FBI confirms 25 ransomware groups using First VPN\u2019s now seized services \u2014 here\u2019s what we know"},"content":{"rendered":"<p><a href=\"https:\/\/www.techradar.com\/vpn\/vpn-privacy-security\/fbi-confirms-25-ransomware-groups-using-first-vpns-now-seized-services-heres-what-we-know\">FBI confirms 25 ransomware groups using First VPN\u2019s now seized services \u2014 here\u2019s what we know<\/a><\/p>\n<p><a href=\"https:\/\/www.techradar.com\/vpn\/vpn-privacy-security\/fbi-confirms-25-ransomware-groups-using-first-vpns-now-seized-services-heres-what-we-know\">https:\/\/www.techradar.com\/vpn\/vpn-privacy-security\/fbi-confirms-25-ransomware-groups-using-first-vpns-now-seized-services-heres-what-we-know<\/a><\/p>\n<p>Publish Date: <a href=\"publish_date]\">2026-05-29 10:18:00<\/a><\/p>\n<p>Source Domain: <a href=\"www.techradar.com\">www.techradar.com<\/a><\/p>\n<ul id=\"elk-59049878-2ca6-418c-9a59-77e50937b227\">\n<li><strong>The FBI identified 25 hacking groups linked to First VPN&#8217;s illegal activities<\/strong><\/li>\n<li><strong>Avaddon Ransomware was included on the list<\/strong><\/li>\n<li><strong>The FBI recommends stricter controls <\/strong><\/li>\n<\/ul>\n<p id=\"elk-2b810bf6-d1b3-4ec8-bfdb-1af8366ba866\">At least 25 ransomware groups were actively using First VPN Service IP for criminal purposes at the time it was dismantled in a coordinated international operation led by European law enforcement forces, the Federal Bureau of Investigation (FBI) has confirmed.<\/p>\n<p>Last week, 33 servers belonging to the free VPN service were taken offline, and its European domain was seized as part of &#8220;Operation Saffron,&#8221; jointly led by European law enforcement agencies Europol and Eurojust.<\/p>\n<p id=\"elk-2b810bf6-d1b3-4ec8-bfdb-1af8366ba866-2\">In a report, the US intelligence agency detailed how First VPN facilitated cybercrime, with hackers using its service to carry out criminal web activity, including scams, botnets, and scanning. Among the 25 names listed is Avaddon Ransomware, a malware group that targeted various business sectors, notably striking the insurance giant AXA in 2021.<\/p>\n<p>        <span class=\"\n            flex\n            after:content-[''] after:flex-1 after:ml-4 after:my-[0.7rem] after:border-t after:border-solid after:border-t-[#ccc]\n            before:content-[''] before:flex-1 before:mr-4 before:my-[0.7rem] before:border-t before:border-solid before:border-t-[#ccc]\n            font-article-heading pb-0 text-[length:var(--article-river-title--font-size,1em)] uppercase sm:text-[length:var(--article-river-title--font-size,0.875em)] font-bold\n        \"><br \/>\n            You may like<br \/>\n        <\/span><\/p>\n<p>Launched in December 2021 and culminating in May, the success of Operation Saffron proved that, thanks to the monumental efforts of law enforcement agencies to tackle illegal activities, we can continue to enjoy the real benefits of the privacy that the best VPNs can offer.<\/p>\n<p>Investigators managed to obtain the platform&#8217;s user database and have already identified 506 specific users, with the data gathered already proving useful in 21 Europol ongoing cybercrime investigations \u2014 and we can only expect more to emerge soon.<\/p>\n<h2 id=\"how-cybercriminals-used-first-vpn-3\">How cybercriminals used First VPN <\/h2>\n<p class=\"vanilla-image-block\" style=\"padding-top:56.25%;\">\n<p><span class=\"credit\" itemprop=\"copyrightHolder\">(Image credit: Photo by Fred TANNEAU \/ AFP via Getty Images)<\/span><\/p>\n<p id=\"elk-08cd4a15-eee9-42b5-bc2f-09a0fb01533c\">According to the FBI report, the VPN explicitly targeted cybercriminals by advertising directly in their circles on the dark web, including Russian-language online forums \u2014 Exploit[.]in and XSS[.]is \u2014 where cybercriminals trade stolen data and hacking tools.<\/p>\n<p>There, the First VPN explicitly offered a secure environment for unlawful&#8230;<\/p>\n<p><a href=\"https:\/\/www.techradar.com\/vpn\/vpn-privacy-security\/fbi-confirms-25-ransomware-groups-using-first-vpns-now-seized-services-heres-what-we-know\">Source<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>FBI confirms 25 ransomware groups using First VPN\u2019s now seized services \u2014 here\u2019s what we&#8230;<\/p>\n","protected":false},"author":1,"featured_media":259070,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"https:\/\/cdn.mos.cms.futurecdn.net\/NDzJ89M9DkUzxEo6cNbZqC-970-80.jpg","fifu_image_alt":"","footnotes":""},"categories":[16],"tags":[],"class_list":["post-259069","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-privacy"],"_links":{"self":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/259069"}],"collection":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/comments?post=259069"}],"version-history":[{"count":1,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/259069\/revisions"}],"predecessor-version":[{"id":259071,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/259069\/revisions\/259071"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/media\/259070"}],"wp:attachment":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/media?parent=259069"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/categories?post=259069"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/tags?post=259069"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}