FBI seizes Virtualine domain in crackdown on bulletproof hosting used by cybercriminals
Dutch police recovered customer data from more than 3,000 accounts, and officials are now following up on what it shows.
US authorities took down the primary domain of Virtualine, a bulletproof hosting service that marketed itself to cybercriminals under several former names, after an operation spanning German, Dutch and British police plus private partners. Investigators said the provider kept hosting a forum that sold access to explicit images of minors even after repeated complaints from law enforcement, NCMEC and a victim's attorney, and that it accepted direct Bitcoin payments through unhosted wallets, which helped customers launder proceeds. Chainalysis and TRM traced the money to ransomware operators, infostealers and a Russian drug marketplace, and Dutch police said dozens of physical servers were seized, taking hundreds of virtual servers offline. The operator denies knowingly hosting child abuse material and says it cut off the customer in question, but the service's network prefixes now show very little routing visibility, and officials have begun following up on data recovered from more than 3,000 customers.
Why it matters
The takedown shows that hosting providers which sell anonymity to criminals can be pursued through the payment trail as well as the servers. Customers who relied on the service have lost their infrastructure, and the recovered data gives investigators leads on users who believed they were operating out of sight. Because the operator denies knowingly hosting abuse material, the case will test how much responsibility a provider bears once it is notified of criminal activity on its network.
Matters or hype?
Does this story matter, or is it hype? Vote before you see what everyone else said.