FBI Warns ‘First VPN Service’ Used by Ransomware Gangs for Cyberattacks

The FBI issued an alert on Thursday, warning consumers that a virtual private network (VPN) provider called “First VPN Service” was being used by malicious actors to carry out hacking attacks
“The service has been active since approximately 2014 and currently provides 32 exit node servers in 27 countries. At least 25 ransomware groups, such as Avaddon Ransomware, have used First VPN Service infrastructure to perform network reconnaissance and intrusions. First VPN Service IP addresses have been used for scanning activity, botnets, denial of service attacks, scams, and hacking,” the May 21 FBI alert said.
Around 75 million Americans use a VPN service, according to a June 2025 survey from Security.org. Since 2023, the share of Americans using VPNs has declined from 46 to 32 percent….