FBI seizes virtualine.net, domain of bulletproof host Virtualine
TRM Labs ties the host to ransomware and StealC payments and says the seizure may leave infrastructure online.
TRM Labs ties the host to ransomware and StealC payments and says the seizure may leave infrastructure online.
TRM Labs says the provider took nearly one-fifth of tracked illicit bulletproof-hosting inflows in 2026, and the seizure may not kill the infrastructure.
Dutch police seized dozens of servers in Limburg and recovered data on more than 3,000 customers; follow-up is underway.
The disruption does not recover credentials already stolen, and ASD’s annual report does not describe the operation.
Version 1.1.2 adds hidden desktop control, a shell, and a loader; Varonis ties its helper to StealC 3.5.
Varonis says the October 16 offering adds hidden desktop, command execution and loaders on top of StealC 3.5.0 theft.
Immersive says Lumma Stealer, StealC and RisePro now account for 75% of stolen credentials sold for initial access.
FakeGit returned with 17,610 GitHub repositories distributing SmartLoader and the StealC infostealer.
Recorded Future's H1 2026 report finds 215 actively exploited CVEs, RAT dominance, NFC payment fraud, and AI-augmented but not autonomous tradecraft.
Infostealers hijacked active Claude sessions to bypass 2FA, drain paid usage and run unauthorized charges; Anthropic is revoking sessions and refunding.
Anthropic invalidated Claude sessions compromised by infostealers such as Vidar, Lumma and Atomic Stealer, which steal browser cookies to bypass 2FA.
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.
Today 2.1K readers · 11K views · 8.8K reads · all time 158K views