The FBI has reported that First VPN has been utilized by multiple ransomware groups for network reconnaissance and intrusions, leading to the disruption of the service and the arrest of its administrator.
The key learning for you is to prioritize monitoring and potentially blocking VPN services that are frequently exploited by cybercriminals for network reconnaissance and intrusions, such as First VPN, as part of your threat intelligence and incident response strategy.