Police seize “First VPN” service used in ransomware, data theft attacks By Bill Toulas May 21, 2026 09:09 AM A virtual private network service called 'First VPN,' used in ransomware and data theft attacks, has been taken offline in a joint international law enforcement operation. …
Dutch govt disrupts malware botnet with 17 million infected devices By Bill Toulas May 29, 2026 10:26 AM Dutch authorities have taken offline a massive botnet of 17 million devices and seized more than 200 servers at a local provider that supported the operation. …
… Instructure has since taken Canvas offline while they respond to the latest cyberattack. …
… The researchers say that “Glassworm's operators built their infrastructure for resilience,” and taking down the botnet required hitting the four C2 channels simultaneously: Solana blockchain: C2 server addresses are encoded in the memo fields of blockchain transactions, creating an immutable, publi… …
… "In May 2026, Microsoft's Digital Crimes Unit DCU , with support from industry partners, disrupted Fox Tempest's MSaaS offering, targeting the infrastructure and access model that enables its broader criminal use." Microsoft says it seized the signspace . cloud domain used by the service, took hund… …
… This also practically means that the device remains operational even when the OS is powered off. …
… "The website is official but all the Exes for windows are being reported as malicious software by windows and the developer is being listed as 'Zipline LLC.' And other times it's saying 'The Water Team' The software is obviously by Appwork and I have to manually unblock it from windows to run it wh… …
… Although multiple machines were identified, the threat actor took the infrastructure offline before the researchers could reveal other systems. …