FBI seizes virtualine.net, domain of bulletproof host Virtualine
TRM Labs ties the host to ransomware and StealC payments and says the seizure may leave infrastructure online.
1
Stories per day · 30 days
2 RSS
Relatedinfostealer3bulletproof-hosting2operation-endgame2ransomware2stadia2virtualine2windows2amadey1asd1botnet1cryptocurrency1domain-seizure1fbi1hvnc1law-enforcement1rat1remote-access-trojan1
7 stories, newest first · one card per story
Stories tagged #stealc
US and partners seize Virtualine bulletproof hosting domain
Dutch police seized dozens of servers in Limburg and recovered data on more than 3,000 customers; follow-up is underway.
1
ASD cuts an Amadey operator off from 180,000 infected computers
The disruption does not recover credentials already stolen, and ASD’s annual report does not describe the operation.
StealC seller relaunches as Stadia RAT for Windows
Version 1.1.2 adds hidden desktop control, a shell, and a loader; Varonis ties its helper to StealC 3.5.
StealC seller returns with Stadia remote access trojan
Varonis says the October 16 offering adds hidden desktop, command execution and loaders on top of StealC 3.5.0 theft.
FakeGit malware campaign returns with 17,610 malicious GitHub repos
FakeGit returned with 17,610 GitHub repositories distributing SmartLoader and the StealC infostealer.
3
Infostealers Are Hijacking Claude Sessions and Draining Subscriptions
Infostealers hijacked active Claude sessions to bypass 2FA, drain paid usage and run unauthorized charges; Anthropic is revoking sessions and refunding.