Europol's Operation Saffron takes down First VPN service over ransomware attacks — 33 'bulletproof' servers spread across 27 countries seized

Europol’s Operation Saffron, backed by 18 countries, seized 33 servers and domains linked to First VPN.

Authorities say the service was tied to ransomware and other cybercrime, with the investigation dating back to 2021.

The takedown identified hundreds of users and targeted infrastructure marketed for anonymity but allegedly used for abuse.

The case highlights growing law-enforcement action against so-called bulletproof VPNs, alongside privacy and cross-border legal concerns.