Cybercriminals Safe-Inet VPN Services closed by FBI/EUROPOL

Lucas Oliveira
Dec 30, 2020

--

according to our research, this service started in 2009 and has been running successfully for over 10 years.
the service was mainly used to cover tracks of Russian and European actors who used the service for the use of Ransomware campaign

The investigation revealed that three domains — INSORG.ORG; SAFE-INET.COM; SAFE-INET.NET. — offered “bulletproof hosting services” to website visitors. A “bulletproof hosting service” is an online service provided by an individual or an organization that is intentionally designed to provide web hosting or VPN services for criminal activity.I found a sale announcement starting in 2009 which proves that the bulletproof service was online for over 10 years, enabling the sending of several campaigns of the most different techniques of information theft, spam, exploits kit, connection to command and control ( C&C) etc

According to the FBI they used 3 domains to stay offering bulletproof service since 2009

The investigation revealed that three domains — INSORG.ORG; SAFE-INET.COM; SAFE-INET.NET. — offered “bulletproof hosting services” to website visitors. A “bulletproof hosting service” is an online service provided by an individual or an organization that is intentionally designed to provide web hosting or VPN services for criminal activity.

--

--