Police boast of hacking VPN where criminals “believed themselves to be safe”

cyberfunk

Ars Scholae Palatinae
1,420
Someone is asleep at the editor/publishing wheel today... Policy != Police.

Screenshot because I expect they'll figure it out eventually:


1779475674106.png
 
Upvote
16 (18 / -2)
Never heard of First VPN. But I also never really get on TOR either, or mess with those underground groups. Wouldn't be surprised to see action against Surfshark or one of the other VPN services hocked all over YouTube boasting that you can use their service to get around Netflix geofencing.

Those ads need to stop saying the quiet part out loud.

Excellent article, thank you!
 
Upvote
10 (11 / -1)

citizencoyote

Ars Tribunus Militum
1,618
Subscriptor++
Saw "FBI" as part of a section heading, immediately became 90+% skeptical of the entire operation. The other 10% still wants to believe that law enforcement can be doing good work, but the percentage is dropping daily.
The US/FBI were only tangentially involved, and from the article only issued security alerts (and probably some behind the scenes support). Also this effort kicked into high gear well before K. Edgar Boozer took over the agency.

The direct actions on May 19 and May 20 were carried out by authorities from France, the Netherlands, Luxembourg, Romania, Switzerland, Ukraine, and the UK.
 
Upvote
19 (20 / -1)
Upvote
5 (6 / -1)

nytta0

Wise, Aged Ars Veteran
140
Never heard of First VPN. But I also never really get on TOR either, or mess with those underground groups. Wouldn't be surprised to see action against Surfshark or one of the other VPN services hocked all over YouTube boasting that you can use their service to get around Netflix geofencing.

Those ads need to stop saying the quiet part out loud.

Excellent article, thank you!

As stated in the article:

Dutch police stressed that this particular VPN service “was considered criminal, because it specifically targeted cyber criminals and gave them the opportunity to protect their identity.”

There's a huge margin between claiming your VPN can bypass Netflix geofencing and claiming your VPN can conceal your activities from the authorities.

Pretty sure VPNs like Surfshark will be fine as long as they don't claim you can evade the police when using their service.
 
Upvote
6 (7 / -1)
So if law enforcement can discover the users of this VPN service, does that mean they can discover the users of any VPN service? In other words is there any way to protect your identity online? Is there any VPN service that is much more foolproof? Is TOR much more secure? Does layering services like using both a VPN and TOR hide your identity even better? What about using a seedbox, or perhaps some other service that I haven’t even heard of? I literally have no idea, but I do find this kind of scary/frustrating: there are times when I — and pretty much everyone — want to be anonymous online, and the reasons why are nobody’s damn business!
 
Upvote
-1 (1 / -2)
1) Smaller service with limited financial backing.
2) Advertised itself as criminal tools.
3) Main person behind it was located Ukraine. A country needing financial support for an ongoing war. This is not the first black hat or criminal service that was based out of Ukraine to be targeted by law enforcement since the need for war cash from other countries started.
 
Upvote
-2 (0 / -2)

HiroTheProtagonist

Ars Tribunus Angusticlavius
6,622
Subscriptor++
So if law enforcement can discover the users of this VPN service, does that mean they can discover the users of any VPN service? In other words is there any way to protect your identity online? Is there any VPN service that is much more foolproof? Is TOR much more secure? Does layering services like using both a VPN and TOR hide your identity even better? What about using a seedbox, or perhaps some other service that I haven’t even heard of? I literally have no idea, but I do find this kind of scary/frustrating: there are times when I — and pretty much everyone — want to be anonymous online, and the reasons why are nobody’s damn business!
In theory yes. In practice, this was more a case of a VPN nakedly advertising use for illegal activities on sites being used for illegal activities, so there was motivation for law enforcement to actually try to root out users. Considering most VPNs are used by businesses or regular people for beating geofences, there's no real reason for law enforcement to try digging through them.

All security is obscurity, anyone who tells you otherwise is trying to sell you something.
 
Upvote
0 (1 / -1)
What crime are they actually being charged with? Is it illegal to operate a VPN with anonymity features? I hope they never come for Mullvad...

Sure, this one advertised on online spaces frequented by criminals. But if I'm selling ACME Crowbars, and I advertise my crowbars on a website that burglars hang out in, and many people there happen to buy my crowbars and break into houses with them, that doesn't make me a burglar, just an unscrupulous entrepreneur, and at least in the US--or anywhere that values freedom--I'm not breaking any laws.
 
Upvote
-4 (0 / -4)

Carbonado

Smack-Fu Master, in training
87
What crime are they actually being charged with? Is it illegal to operate a VPN with anonymity features? I hope they never come for Mullvad...

Sure, this one advertised on online spaces frequented by criminals. But if I'm selling ACME Crowbars, and I advertise my crowbars on a website that burglars hang out in, and many people there happen to buy my crowbars and break into houses with them, that doesn't make me a burglar, just an unscrupulous entrepreneur, and at least in the US--or anywhere that values freedom--I'm not breaking any laws.
It does if you advertise your crowbars as "crime-grade, for best crimes which you can commit with a crime-grade crowbar. Here's how you commit crimes with these crowbars, criminally! Please to use ill-gotten crime funds to buy of crime-grade crowbars here ilegally, for crimes, which you commit"
 
Upvote
6 (7 / -1)

Jeff S

Ars Legatus Legionis
11,207
Subscriptor++
What crime are they actually being charged with? Is it illegal to operate a VPN with anonymity features? I hope they never come for Mullvad...

Sure, this one advertised on online spaces frequented by criminals. But if I'm selling ACME Crowbars, and I advertise my crowbars on a website that burglars hang out in, and many people there happen to buy my crowbars and break into houses with them, that doesn't make me a burglar, just an unscrupulous entrepreneur, and at least in the US--or anywhere that values freedom--I'm not breaking any laws.
I would be interested to know the specific charges/statutes as well. But a good general rule of thumb is that if police present you with a search warrant, or a subpoena, for information about alleged crimes, you have to at that point cooperate with them.

Depending on the jurisdiction, you may or may not be under an obligation to maintain and provide connection logs. I don't think in the US that if you operate a VPN, you have to provide past logs, but once there is a search warrant, you may be required to start keeping a log in order to provide the police the information they seek related to criminal activity.

Ultimately, it all comes down to the laws in the jurisdiction where the VPN is run, and where the crime occured. If the VPN is in Ukraine and the crimes occurred in the EU, it would also depend on the treaties in force regarding cooperation on criminal investigations. It seems Ukraine has agreed to cooperate with EU investigators and to investigate crimes originating in Ukraine or passing through Ukraine infrastructure.
 
Upvote
1 (2 / -1)