FBI Seizes Domain Used by Cybercrime-Linked Bulletproof Host Virtualine
Summary
The FBI seized virtualine[.]net, used by Russian-speaking bulletproof host Virtualine, which court documents say supported illicit services. TRM Labs linked the provider to cybercrime payments and cautioned that the seizure alone does not show operations have stopped.
Key points
- The FBI seized virtualine[.]net, a domain associated with the Russian-speaking bulletproof hosting provider Virtualine, also known by several other names.
- Court documents say Virtualine hosted illicit services and helped customers evade law-enforcement takedowns; forum posts advertised support for activities including phishing, spam and carding.
- The article says Virtualine supported a customer offering a hack-for-hire service to steal explicit content from online accounts, and continues to host a new website created for uploading illicit content.
- TRM Labs says ransomware groups and a StealC infostealer operator have used Virtualine.
- TRM Labs reports that Virtualine received more illicit-attributed cryptocurrency than any other TRM-labeled bulletproof hosting provider, while receiving less total value than several peers.
- TRM Labs cautions that seizing a domain can disrupt access to a service but does not by itself establish that the operator has stopped or customers have lost access to underlying infrastructure.
Article Details
- Event Type
- FBI seizure of the domain associated with Virtualine, a bulletproof hosting provider
- Impact
- The seizure disrupts access to Virtualine through virtualine.net. Court documents describe the provider as hosting customers’ illicit services and helping them evade law-enforcement takedowns. The article notes that the domain seizure alone does not establish that the operator stopped working or that customers lost access to all underlying infrastructure; it also reports that Virtualine continued hosting a new website created for a customer.
Indicators of compromise
| Type | Indicator | Context |
|---|---|---|
| DOMAIN | virtualine[.]net | Domain associated with Virtualine, a bulletproof hosting provider reported to host illicit services; the FBI seized it. |