The US says an ASML chip tool is in China. ASML denies it.


The US has accused the one company on Earth that makes the machines behind cutting-edge chips of letting one slip into China. It has not shown its proof, and the company says it never happened.

In a series of recent meetings, Commerce Secretary Howard Lutnick told ASML’s senior leaders that Washington believes one of its top-of-the-line lithography machines may have made its way into China, in violation of US-led export restrictions. ASML, the Dutch firm that holds a near-total monopoly on the technology, denies it.

What the US is claiming

According to Bloomberg, Lutnick’s team believes it has evidence that ASML shipped EUV-related components and transport equipment to China, but has repeatedly declined to show it.

Extreme ultraviolet, or EUV, machines are the bottleneck for producing the most advanced semiconductors, and ASML is the only company that makes them. They have been off-limits to China since around 2019, and the dispute is the latest twist in a chip war that has repeatedly entangled the Dutch company.

ASML’s flat denial

ASML’s pushback is unusually direct. The company has circulated a document in Washington titled “No indication of any ASML EUV system in China”, and its statement leaves little room: it has “never shipped an EUV machine to China”, nor any “component, module or equipment specially designed to be used in an EUV machine”.

The 💜 of EU tech

The latest rumblings from the EU tech scene, a story from our wise ol’ founder Boris, and some questionable AI art. It’s free, every week, in your inbox. Sign up now!

The accusation is hard to square

The commercial logic also cuts against it. ASML’s export licence is its lifeline, and even as China shrinks from about a third of its revenue toward a fifth, it remains the company’s single biggest market.

Torching that licence to arm one Chinese customer would be close to corporate suicide. That is the puzzle at the centre of the story: a serious allegation, no public evidence, and a defendant with every reason not to do what it is accused of.

The bigger squeeze

The clash lands as Washington leans harder on its allies. A proposed US law would force the Netherlands and Japan to mirror American export rules or face unilateral enforcement, and President Trump is reportedly pushing the Dutch hard.

The pressure is doubly awkward, because ASML’s future is increasingly American: it has just signed up to help build Elon Musk’s $55bn “Terafab” chip plant in Texas, even as Washington turns up the enforcement heat.

For ASML, the message is that compliance may no longer be enough. It now has to prove a negative, on Washington’s timeline, with a roughly $700bn valuation and its China business in the balance.

Until the US produces what it says it has, this is a standoff over an absence: one machine that may or may not be where it should not be, with the entire Western effort to keep advanced chipmaking out of China riding on the answer.



Source link

Leave a Reply

Subscribe to Our Newsletter

Get our latest articles delivered straight to your inbox. No spam, we promise.

Recent Reviews


Global law enforcement operation takes First VPN offline

Pierluigi Paganini
May 21, 2026

Police seized First VPN in a global crackdown, exposed its cybercrime users, and shut down infrastructure tied to ransomware and data theft.

A major international law enforcement operation has taken First VPN offline, a service that had become a quiet staple for ransomware crews, data thieves, and other cybercriminals trying to hide in plain sight.

“The coordinated action took place between 19 and 20 May and targeted the infrastructure behind one of the most widely used VPN services in the cybercrime underground.” reads the press release published by Europol. “The gathered intelligence exposed thousands of users linked to the cybercrime ecosystem and generated operational leads connected to ransomware attacks, fraud schemes, and other serious offences worldwide.”

Authorities seized dozens of servers across 27 countries, arrested the administrator, and carried out a search in Ukraine, cutting off an infrastructure that had been used in a wide range of serious investigations.

The service marketed itself as a privacy-first VPN with no logging and no cooperation with law enforcement, which made it appealing not just to ordinary users but also to threat actors looking to mask their activity. That’s the uncomfortable part of the VPN story: the same tools that help people protect privacy on public Wi-Fi or work securely from home are also useful for criminals who want to conceal their origin, route traffic through different regions, and make attribution harder.

“For years, the service, known as ‘First VPN’, was promoted on Russian-speaking cybercrime forums as a trusted tool for remaining beyond the reach of law enforcement. It offered users anonymous payments, hidden infrastructure, and services designed specifically for criminal use.” continues the press release. “‘First VPN’ had become deeply embedded in the cybercrime ecosystem, appearing in almost every major cybercrime investigation supported by Europol in recent years. Criminals used it to conceal their identities and infrastructure while carrying out ransomware attacks, large-scale fraud, data theft, and other serious offences.”

Europol said the service name kept resurfacing in major cybercrime cases, and Eurojust confirmed that investigators had been building the case for years through a joint effort led by French and Dutch authorities. 

What seems to have made this case especially valuable for investigators is that they didn’t just shut the service down, they also got inside its infrastructure before it disappeared. That likely gave them access to user records, connection data, and other evidence that can be used to map criminal activity back to real people and devices.

Authorities dismantled cybercrime infrastructure, including 33 servers and a service based in Ukraine, and seized domains linked to the operation: 1vpns.com, 1vpns.net, 1vpns.org, plus associated onion sites. They also notified users directly and shared information on hundreds of accounts with international partners, which suggests this may lead to follow-on investigations well beyond the VPN itself.

The bigger lesson is simple: privacy tools are not the problem, but criminal operators often rely on the same infrastructure normal users trust. Once that infrastructure is compromised, dismantled, or logged, the illusion of anonymity can disappear very quickly.

“The operation has already generated significant operational results at Europol’s level:

  • 21 Europol-supported investigations advanced through the intelligence obtained.”
  • 83 intelligence packages disseminated;
  • information linked to 506 users shared internationally;

“For years, cybercriminals saw this VPN service as a gateway to anonymity. They believed it would keep them beyond the reach of law enforcement. This operation proves them wrong. Taking it offline removes a critical layer of protection that criminals depended on to operate, communicate and evade law enforcement.” said Edvardas Šileris, Head of Europol’s European Cybercrime Centre

Follow me on Twitter: @securityaffairs and Facebook and Mastodon

Pierluigi Paganini

(SecurityAffairs – hacking, First VPN)







Source link