Police boast of hacking VPN where criminals "believed themselves to be safe"

Europol, with support from numerous international partners, dismantled the criminal VPN service First VPN during coordinated actions on May 19–20, seizing domains and 33 linked servers and arresting the administrator; the operation produced 83 intelligence packages and information on 506 users which has been shared to support 21 ongoing investigations. Law enforcement noted the VPN infrastructure was used to enumerate target networks and could facilitate password spraying and brute-force attacks against services such as SSH, RDP, and web applications; users of the service were notified they had been identified.