DoubleVPN servers, logs, and account info seized by law enforcement

guest · Jun 29, 2021

DoubleVPN servers, logs, and account info seized by law enforcement
June 29, 2021
https://www.bleepingcomputer.com/ne...s-and-account-info-seized-by-law-enforcement/

Law enforcement has seized the servers and customer logs for DoubleVPN, a double-encryption service commonly used by threat actors to evade detection while performing malicious activities.

DoubleVPN is a Russian-based VPN service that double-encrypts data sent through their service.
When using the service, requests are encrypted and transmitted to one VPN server, which sends it to another VPN server, which finally connects to the final destination, as shown below.
Click to expand...

The doublevpn.com [archive.org] website was seized today by law enforcement, who stated that they gained access to the servers for DoubleVPN and took personal information, logs, and statistics for the service's customers.

"On 29th of June 2021, law enforcement took down DoubleVPN. Law enforcement gained access to the servers of DoubleVPN and seized personal information, logs and statistics kept by DoubleVPN about all of its customers. DoubleVPN’s owners failed to provide the services they promised," says the now-seized doublevpn.com website.
Click to expand...

Europol has confirmed to BleepingComputer that the seizure message is legitimate and that they will be providing more information about the operation tomorrow.

While no further information is available at this time, the splash screen states that the operation was conducted by Germany's BKA, Netherland's Politie, the FBI, the UK National Crime Agency, the United States Secret Service, the Royal Canadian Mounted Police, Eurojust, Switzerland's Polizia Cantonale, Europol, Bulgaria's GDBOP, and the Swedish National Police.
Click to expand...

FanJ · Jun 30, 2021

Europol Press Release - 30 June 2021
Coordinated action cuts off access to VPN service used by ransomware groups
https://www.europol.europa.eu/newsr...-access-to-vpn-service-used-ransomware-groups

DoubleVPN was heavily advertised on both Russian and English-speaking underground cybercrime forums as a means to mask the location and identities of ransomware operators and phishing fraudsters. The service claimed to provide a high level of anonymity by offering single, double, triple and even quadruple VPN-connections to its clients.
Click to expand...

PS: note by me:
This thread could be placed here in the "privacy technology" forum or in the "Other Security Topics" forum (we are talking about ransomware operators and other criminals).

Log in or Sign up

DoubleVPN servers, logs, and account info seized by law enforcement

guest Guest

FanJ Updates Team

Log in or Sign up

DoubleVPN servers, logs, and account info seized by law enforcement

guest Guest

FanJ Updates Team

Useful Searches