Ethical Hacking News
Telegram's t.me shortlinks experienced a widespread outage due to its association with a sanctioned VPN service favored by cybercriminals, highlighting the ongoing challenge faced by law enforcement agencies in tracking and dismantling cybercrime networks.
Telegram's t.me shortlinks experienced a widespread outage due to its association with sanctioned VPN service 1VPNS. The outage was related to OFAC (Office of Foreign Assets Control) sanctions imposed on 1VPNS for selling services to ransomware groups and other cybercriminals. The US Office of Foreign Assets Control designated 1VPNS and its administrator, Dmytro Rashevskyi, for their alleged involvement in facilitating ransomware attacks against US businesses and critical infrastructure providers. European law enforcement agencies took down 1VPNS's infrastructure offline in May to disrupt the cybercriminal ecosystem and protect the American people from potential threats. Telegram removed its links and affiliations with 1VPNS, leading to the lifting of suspended t.me shortlinks.
Telegram's t.me shortlinks experienced a widespread outage for around a day, affecting users across the messaging platform, due to its association with a sanctioned VPN service favored by cybercriminals. The incident serves as a stark reminder of the ongoing cat-and-mouse game between law enforcement agencies and organized crime groups.
The .ME domain registry confirmed that the issues were related to OFAC (Office of Foreign Assets Control) sanctions, which designated First VPN Service (1VPNS) on July 13 for selling services to ransomware groups and other cybercriminals. Pavel Durov, founder and CEO of Telegram, publicly asked the .ME registry to investigate the matter, leading to a thorough examination of the situation.
Upon further investigation, it was revealed that Telegram's t.me shortlinks stopped working due to the sanctions imposed on 1VPNS. The US Office of Foreign Assets Control (OFAC) had designated 1VPNS and its administrator, Dmytro Rashevskyi, for their alleged involvement in facilitating ransomware attacks against US businesses and critical infrastructure providers.
The sanctioned entity, 1VPNS, was advertised almost exclusively on criminal dark web forums and used for various malicious activities since its inception around 2014. According to Europol's European Cybercrime Centre, 1VPNS provided a crucial layer of anonymity for cybercriminals, allowing them to operate with relative impunity.
In May, European law enforcement agencies took 1VPNS's infrastructure offline, citing the service's role in facilitating ransomware attacks against at least 25 groups. The operation aimed to disrupt the cybercriminal ecosystem and protect the American people from potential threats.
After a thorough review and verification process, Telegram confirmed that it had removed its links and affiliations with 1VPNS. The suspension of t.me shortlinks was subsequently lifted, allowing users to access the platform once again.
The incident highlights the ongoing challenge faced by law enforcement agencies in tracking and dismantling cybercrime networks. As the digital landscape continues to evolve, so too do the tactics employed by malicious actors. The case of 1VPNS serves as a stark reminder of the importance of vigilance and cooperation between governments, law enforcement agencies, and technology companies in combating cybercrime.
The sanctions imposed on 1VPNS also underscore the growing efforts to disrupt the ransomware ecosystem. Gene Lange, senior counselor to the Secretary of the Treasury, stated that under President Trump's leadership, Treasury is using every available tool to disrupt the cybercriminal ecosystem and protect the American people from potential threats.
As the threat landscape continues to evolve, it is essential for technology companies, governments, and law enforcement agencies to remain vigilant and work together to combat cybercrime. The case of Telegram's t.me shortlinks serves as a timely reminder of the need for cooperation and vigilance in this ongoing battle against organized crime.
Related Information:
https://www.ethicalhackingnews.com/articles/Telegram-Shortlinks-Knocked-Offline-Amidst-US-Sanctions-on-Ransomware-Favored-VPN-Service-ehn.shtml
https://www.theregister.com/security/2026/07/16/telegram-shortlinks-knocked-offline-over-sanctioned-vpn-connection/5271964
Published: Thu Jul 16 07:40:52 2026 by llama3.2 3B Q4_K_M
