Kenwell got a reaction from
Stalinium in DoubleVPN - Take down
To give you a bit more inside of this story i stumbled upon this dutch police website.
Its in Dutch so google just translated the Police website: https://www.politie.nl/nieuws/2021/juni/30/klap-voor-communicatie-criminelen-doublevpn-uit-de-lucht.html
A hit for communication criminals: DoubleVPN off the air
A large-scale international action by the police and the judiciary has dealt another blow to communication between criminals. DoubleVPN has been taken off the air. This company provided VPN services (Virtual Private Network); secure and shielded internet connections that provided a safe haven for cybercriminals to attack their victims.
In many European countries, including the Netherlands and Germany, as well as in the United States and Canada, DoubleVPN servers were seized yesterday and the infrastructure was shut down. The DoubleVPN websites now show a splash page from the police and the judiciary: cybercrime facilitators are not anonymous.
The large, international investigation into DoubleVPN was led by the National Unit of the Dutch police, under the authority of the National Public Prosecutor's Office.
Within this investigation, Team High Tech Crime (THTC) of the National Unit, National Criminal Investigation Service, worked together with foreign partners in the fight against (inter)national serious crime.
Important partners from the very beginning were Germany, the United States, the United Kingdom and Canada. Later on, Italy, Bulgaria, Sweden and Switzerland also joined. Europol and Eurojust played an important coordinating role during the investigation.
In this investigation, the Dutch police and the Public Prosecution Service have used their hacking powers to penetrate DoubleVPN's infrastructure. In the Netherlands, the police and the judiciary are legally authorized to enter computers secretly and remotely for the purpose of investigating serious crimes. The Digital Intrusion Team (DIGIT) of the National Unit, Specialist Operations Service, is the only team that has this authority. The team consists of employees of the (regional) police units, the Royal Netherlands Marechaussee and the Fiscal Intelligence and Investigation Service.
Ransomware and Phishing
DoubleVPN was a small VPN provider, but very important to cybercriminals. It has been discussed a lot on various forums. The service also advertised itself on these forums; especially on Russian- and English-language underground cybercriminal forums. DoubleVPN was used by ransomware spreaders and phishing fraudsters, among others.
The service offered customers maximum anonymity by offering not only single, but also double, triple and even quad VPN connections. The cheapest VPN connection cost €22 per month.
Money laundering and participation in a criminal organization
DoubleVPN is suspected of being a criminal organization. The company is also suspected of money laundering and complicity in or involvement in the crimes committed by its customers using DoubleVPN's services. Think of hacking, selling and/or spreading malware, such as ransomware and selling the data that DoubleVPN's customers received by hacking.
Global joining of forces
“Criminal facilitators like DoubleVPN have a global reach. Their servers are located in almost all countries. Combating these types of criminals can therefore only be successful if we join forces internationally and make use of each other's knowledge, skills and networks. The National Unit continuously plays an important role in this type of international investigation because of its specializations in the field of cyber, intelligence and tactics," said Andy Kraag, head of the National Investigation Service of the National Unit. “This research shows once again that cybercrime facilitators are not untouchable.”
No safe harbor
“The people behind DoubleVPN think they can remain anonymous when facilitating large-scale cybercrime operations, but they are certainly not,” said public prosecutor Wieteke Koorn. “By taking legal action and breaking into their infrastructure digitally, we make one thing very clear: there is no safe harbor for these types of criminals. These criminal acts harm the digitized society. They affect the trust of citizens and companies in digital technology. For that reason, we have to stop their behavior.”
What is a Virtual Private Network?
A VPN service encrypts internet traffic from the user's IP address to the VPN service. To the outside world, this means that the internet traffic does not seem to come from the user, but from the IP address of the VPN service. The IP address of the user is thus protected. In this way, an ISP or a network administrator does not know which websites a user is visiting.
A secure VPN internet connection is legal. Individuals and companies use it because they want to communicate confidentially with each other. Abuse of VPN internet connections for criminal activities is of course punishable by law.