21/05/2026
The FBI has released an advisory on ransomware groups’ use of the First VPN Service to conduct network reconnaissance and computer intrusions. Advertised on criminal forums like Exploit[.]in and XSS[.]is, First VPN is used to facilitate botnets, DDoS attacks, hacking, and other malicious activity.
To better defend your networks, review the advisory to learn about indicators of compromise (IOCs) and tactics, techniques, and procedures (TTPs) associated with First VPN: ic3.gov/CSA/2026/260521.pdf
