US and partners seize Virtualine bulletproof hosting domain
Original title: Police seize Virtualine bulletproof service tied to ransowmare, cybercrime
Dutch police seized dozens of servers in Limburg and recovered data on more than 3,000 customers; follow-up is underway.
U.S. authorities seized virtualine.net, the primary domain of bulletproof host Virtualine, also known as Secury, Massgod, Spamhouse, Lanedo, and Omegatech. The DOJ says the service advertised support for phishing, spam, carding, and port scanning and knowingly hosted a forum promoting child abuse material. Germany, the Netherlands, and the UK assisted. Chainalysis and TRM link its Bitcoin payments to ransomware, StealC, forums, and a Russian drug marketplace. Much of the network now has very low routing visibility, though it remains partly online.
Unconfirmed: The administrator rejects the child-abuse allegation; payment-flow shares are Chainalysis and TRM analysis, not court findings.
- The FBI seized virtualine.net with help from Polizei Hessen, Politie, and the UK NCA.
- Dutch police took hundreds of virtual servers offline and recovered data from more than 3,000 customers.
- TRM says a Russian drug marketplace was about 44% of flows and ransomware about 5%.
- TRM also reports payments from the StealC infostealer this year.
- The administrator denied child-exploitation claims in a letter on virtualine.org.
Impact: Hosting and payment infrastructure used for cybercrime and alleged child abuse material
- 1.Treat Virtualine-hosted infrastructure and related Bitcoin payment addresses as malicious.
- ATT&CK
- T1566 Phishing
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| domain | virtualine.org | n an open letter to authorities published on a new website, virtualine[.]org, captured by cybersecurity company Silent Push . The oper |
From the original article
3 min read at bleepingcomputer.com
U. S. law enforcement has seized the primary domain of Virtualine, a bulletproof hosting service advertised on cybercrime forums for facilitating illegal activities.
By Bill Toulas · bleepingcomputer.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.