European law enforcement authorities have shut down a virtual private network service that was used by approximately two dozen ransomware gangs to conceal their cyberattacks, according to Europol.

The VPN service, known as First VPN, had marketed itself as providing complete anonymity for users conducting cyberattacks. However, Europol announced that investigators were able to identify users of the service and notify them that their identities are now known to authorities.

The shutdown represents a significant disruption to cybercriminal operations that relied on the service to mask their digital footprints while conducting ransomware attacks and other illegal online activities.

Separately, cybersecurity experts are examining what they term "wrench attacks" - a method where sophisticated hackers recruit local operatives to carry out physical crimes, including kidnappings, as part of broader criminal schemes. Retired law enforcement officials have suggested this approach may involve a mastermind coordinating both digital and physical criminal activities.

The VPN closure comes as law enforcement agencies worldwide have intensified efforts to combat ransomware groups that have targeted critical infrastructure, businesses, and government agencies. The identification of previously anonymous users could lead to further arrests and prosecutions in ongoing cybercrime investigations.