Kiberjinoyatchilik
O'q o'tkazmaydigan xost Virtualine FBI tomonidan domeni musodara qilindi
U mijozlarga xakerlik xizmatlarini joylashtirishga ruxsat bergan, to'lov dasturlari va ma'lumot o'g'irlovchi operatorlarni qo'llab-quvvatlagan hamda kriptovalyuta to'lovlarini qabul qilgan.
Muallif
Ionut Arghire
| 30-oktabr, 2026 (9:36 ET)
FBI turli kiberjinoyatchilik operatsiyalari bilan bog'liq bo'lgan, rus tilida so'zlashuvchi o'q o'tkazmaydigan xosting xizmatlari provayderi virtualine.net domenini musodara qildi.
Sud hujjatlariga ko'ra, Virtualine, shuningdek, Secury, Massgod, Spamhouse, Lanedo va Omegatech nomlari bilan ham tanilgan, mijozlarning noqonuniy xizmatlarini joylashtirgan va ularga huquqni muhofaza qiluvchi organlar tomonidan olib tashlash urinishlaridan qochishga yordam bergan.
Kiberjinoyatchilik forumlaridagi postlarda Virtualine turli kiberjinoyatchilik faoliyatlari, jumladan, fishing, spam, karting va boshqalarni qo'llab-quvvatlashini targ'ib qilgan; mijoz xizmatlarini bog'lanmagan infratuzilmaga ko'chirish qobiliyatini reklama qilgan; va suiiste'molni ataylab e'tiborsiz qoldirishini da'vo qilgan.
Shuningdek, u foydalanuvchilarga voyaga yetmagan va kattalar haqidagi ochiq tasvirlar va videolarni joylashtirish va sotishga ruxsat bergan hamda onlayn akkauntlardan jinsiy ochiq kontentni o'g'irlashga qaratilgan xakerlik xizmatini taklif qilgan kamida bitta mijozni qo'llab-quvvatlagan. Bir nechta mamlakatlardagi huquqni muhofaza qiluvchi organlardan ko'plab olib tashlash so'rovlarini olganiga qaramay, Virtualine mijozga yordam berishda davom etgan va hatto ularga noqonuniy kontentni yuklash uchun yangi veb-sayt yaratishda yordam bergan. Provayder yangi veb-saytni hali ham joylashtirmoqda.
Blokcheyn razvedka firmasi TRM Labs ma'lumotlariga ko'ra, Virtualine, boshqalar qatorida, to'lov dasturlari guruhlari va ma'lumot o'g'irlovchi operator tomonidan ishlatilgan.
Reklama. O'qishni davom ettirish uchun pastga aylantiring.
"Virtualine TRM tomonidan belgilangan har qanday boshqa o'q o'tkazmaydigan xosting provayderidan ko'proq noqonuniy manbali kriptovalyuta olgan, garchi bir nechta tengdoshlaridan kamroq umumiy qiymat olgan bo'lsa ham," — deydi kompaniya.
O'q o'tkazmaydigan xosting provayderi birinchi marta 2024-yilda Exploit kiberjinoyatchilik forumida paydo bo'lgan, lekin 2019-yildan beri faoliyat yuritayotganini da'vo qiladi. U 2025-yilda zararli dasturlar va botnet xostingi uchun avtonom tizim raqamlarining eng katta to'plamiga ega bo'lganini da'vo qilgan.
Virtualine'ning belgilangan Bitcoin manzillariga kelgan to'lovlarning aksariyati Rossiya narkotik bozori (44%) va katta sextortion sxemasi (17%) dan kelgan. Kriptovalyuta mikseri 13% ni va to'lov dasturlari 5% ni tashkil etgan. 2026-yilda Virtualine StealC ma'lumot o'g'irlovchi operatorlaridan ham to'lovlar olgan.
"Domen musodarasi mijozlar xizmatni qanday topishi va unga kirishiga ta'sir qiladi. Bu o'z-o'zidan operator ishlashni to'xtatganini yoki mijozlar barcha asosiy infratuzilmaga kirish huquqini yo'qotganini anglatmaydi," — deb ta'kidlaydi TRM.
Bog'liq:Ukrainalik Hive va Nefilim to'lov dasturi sherigi AQSh qamoqxonasida 70 oyga hukm qilindi
Bog'liq:Niderlandiya politsiyasi NFC relay hujumlari orqali bank hisoblaridan 400 000 dollardan ortiq mablag'ni o'g'irlagan ikki kishini hibsga oldi
Bog'liq:Microsoft 1 milliarddan ortiq xabar yuborgan xitoy tilidagi fishing bozorini to'xtatdi
Bog'liq:15 000 ta mul bilan kiberjinoyatchilik yuvish tarmog'ining asoschisi AQShda aybini tan oldi
Muallif Ionut Arghire
Ionut Arghire SecurityWeek uchun xalqaro muxbir.
Kundalik axborot byulleteni
So'nggi kiberxavfsizlik tahdidlari, tendentsiyalar va mutaxassis fikrlari haqida xabardor bo'lish uchun SecurityWeek elektron pochta axborot byulleteniga obuna bo'ling.
Biznes elektron pochta*
emailsignupsource
Qo'shimcha ma'lumot uchun Maxfiylik siyosatimizni o'qing.
Ionut Arghiredan ko'proq
- Adobe, Veeam, Juniper Networks jiddiy zaifliklarni tuzatdi
- 41 000 dan ortiq DHS xodimlarining ma'lumotlari onlayn tarzda sizib chiqdi
- HHS arizasi iRhythm ma'lumotlar buzilishini 8,2 millionga yetkazdi
- Xitoylik xakerlar past darajadagi ESXi jurnal yozish zaifligini nol kun sifatida jimgina ishlatishdi
- Ukrainalik Hive va Nefilim to'lov dasturi sherigi AQSh qamoqxonasida 70 oyga hukm qilindi
- Chrome va Firefox yangilanishlari 200 dan ortiq zaifliklarni tuzatdi
- Xitoy bilan bog'liq xakerlar PHP2Shell orqali xavfsizlik devorlarini ildizdan o'rnatishdi
- Xakerlar yangi Oracle EBS zaifligini tekshirishni boshlashdi
So'nggi yangiliklar
- Yangi WordPress zaifligi hujumchilarning nishonida
- Drupal Commerce Core zaifligi onlayn do'konlarga qarshi ishlatilmoqda
- Polymarket savdogarlaridan 2 million dollardan ortiq mablag' yangi ta'minot zanjiri hujumida o'g'irlandi
- Maksimal darajadagi GitLab zaifligi Alpine Linux'ga qarshi ishlatilmoqda
- TeamViewer zaifligi zararli xostlarga qo'llab-quvvatlash texniklarining mashinalarini egallashga imkon berishi mumkin
- 6 milliard dollarlik Binance xakerligi Shimoliy Koreyaning TraderTraitor xususiyatlarini ko'rsatmoqda
- Xavf shaxsiy bo'lganda: xavfsizlik rahbarlari saraton tashxisidan nimani o'rganishlari mumkin
- Google Gemini 4 Carbon modelida kuchli kiberxavfsizlik qobiliyatlarini targ'ib qilmoqda
Trendda
Xitoy bilan bog'liq xakerlar PHP2Shell orqali xavfsizlik devorlarini ildizdan o'rnatishdi
Node2Shell: Brotli zaifligi Microsoft, Node.js, Python paketlarida tuzatishlarni keltirib chiqardi
Chrome va Firefox yangilanishlari 200 dan ortiq zaifliklarni tuzatdi
Xitoylik xakerlar past darajadagi ESXi jurnal yozish zaifligini nol kun sifatida jimgina ishlatishdi
CISA Node2Shell ishlatilishi haqida ogohlantirmoqda, chunki honeypotlar hujum urinishlarini qayd etmoqda
Cisco SD-WAN nol kun ishlatilishi Volt Typhoon'ning "Jim poyezd" tarmog'i bilan bog'liq
Oracle Health ma'lumotlar buzilishi deyarli 20 millionga yetdi
Xakerlar yangi Oracle EBS zaifligini tekshirishni boshlashdi
Kundalik axborot byulleteni
So'nggi tahdidlar, tendentsiyalar va texnologiyalar haqida xabardor bo'lish, shuningdek, soha mutaxassislarining chuqur fikrlarini olish uchun SecurityWeek elektron pochta axborot byulleteniga obuna bo'ling.
Biznes elektron pochta*
emailsignupsource
Qo'shimcha ma'lumot uchun Maxfiylik siyosatimizni o'qing.
Vebinar: Agentik pentest CTEM dasturi uchun kuchliroq
4-noyabr, 2026
Pentestlar orasidagi xavfsizlik bo'shliqlarini yoping. Ushbu sessiyada agentik pentestni o'rganing va CTEM dasturingizda doimiy ta'sirni tekshirish uchun amaliy asosga ega bo'ling.
Ro'yxatdan o'ting
Virtual tadbir: CISO Forum 2026 sammiti
10 va 11-noyabr, 2026
CISO'lar, yuqori darajadagi kiberxavfsizlik rahbarlari, amaliyotchilar, soha mutaxassislari va boshqa xavfsizlik rahbarlarini amaliy tajriba almashish va korporativ kiberxavfsizlik strategiyasini shakllantiruvchi masalalarni ko'rib chiqish uchun birlashtiramiz.
Ro'yxatdan o'ting
Harakatdagi odamlar
Quantum eMotion Wayne Teepleni CTO etib tayinladi.
Guy Ellis NCC Group bosh direktori etib tayinlandi.
Noma Security Bobby Shokerni CFO va Alberto Rodriguesni CCO etib tayinladi.
Harakatdagi ko'proq odamlar
Mutaxassis fikrlari
Xavf shaxsiy bo'lganda: xavfsizlik rahbarlari saraton tashxisidan nimani o'rganishlari mumkin
Xavf menejerlari zaif signallarni aniqlash, buzilishlarga tayyorgarlik ko'rish va noaniqlik ostida qiyin qarorlar qabul qilishga o'rgatilgan. Ammo intizom tizim yoki korxona emas, balki siz bo'lganingizda boshqacha ko'rinadi.(Steve Durbin)
Hech kim xavfsizlik so'rovnomasiga ishonmaydi. Shunga qaramay, biz unga tayanamiz.
Deyarli har bir B2B bitimni nazorat qiladigan jarayon — yuboruvchi ishonmaydigan va qabul qiluvchi qabul qiladigan o'z-o'zini baholash. Nihoyat, kompaniyalar o'rtasida ishonch uchun yaxshiroq asos mavjud.(Sravish Sridhar)
Bu normal: NetScaler nol kunlari yangi normal haqida bizga nimani aytadi
Yaqinda Citrix NetScaler tuzatishlarining yana bir to'plami chiqarilishi mumkinligi sababli, tuzatish boshqaruvi quvurlarini tayyor saqlang.(Tod Beardsley)
Zamonaviy kiberhujumlarga qarshi kurashda kontekst qirol
Kontekstual himoya xavfsizlik jamoalariga signallarni bog'lash, keyin nima kelishini oldindan bilish va tahdidlar kuchayishidan oldin ularni to'xtatishga yordam beradi.(Etay Maor)
Cybercrime
Bulletproof Host Virtualine Loses Its Domain to FBI Seizure
It allowed customers to host hack-for-hire services, supported ransomware and infostealer operators, and accepted crypto payments.
By
Ionut Arghire
| October 30, 2026 (9:36 AM ET)
*
The FBI has seized virtualine.net, the domain of a Russian-speaking bulletproof hosting services provider associated with various cybercriminal operations.
According to court documents, Virtualine, also known as Secury, Massgod, Spamhouse, Lanedo, and Omegatech, has been hosting customers’ illicit services and helped them evade law enforcement takedown attempts.
In posts on cybercrime forums, Virtualine promoted support for various types of cybercriminal activity, including phishing, spam, carding, and more; advertised its ability to move customer services to unaffiliated infrastructure; and claimed it intentionally ignored abuse.
It also allowed users to post and sell explicit images and videos of minors and adults, and supported at least one customer that offered a hack-for-hire service aimed at stealing sexually explicit content from online accounts.
Despite receiving numerous takedown requests from law enforcement agencies in several countries, Virtualine continued to aid the customer and even helped them create a new website for uploading the illicit content. The provider continues to host the new website.
According to blockchain intelligence firm TRM Labs, Virtualine has been used, among others, by ransomware groups and an infostealer operator.
Advertisement. Scroll to continue reading.
“Virtualine received more illicit-attributed cryptocurrency than any other TRM-labeled bulletproof hosting provider, despite receiving less total value than several peers,” the company says.
The bulletproof hosting provider first emerged on the cybercrime forum Exploit in 2024, but claims to have been operating since 2019. It claimed to have had the largest collection of autonomous system numbers for malware and botnet hosting in 2025.
Most of the payments Virtualine’s labeled Bitcoin addresses have received came from a Russian drug marketplace (44%) and a large sextortion scheme (17%). A cryptocurrency mixer accounted for 13% of them and ransomware for 5%. In 2026, Virtualine also received payments from the StealC infostealer operators.
“A domain seizure disrupts how customers find and access a service. It does not, by itself, establish that the operator has stopped working, or that customers have lost access to all underlying infrastructure,” TRM notes.
Related:Ukrainian Hive and Nefilim Ransomware Affiliate Gets 70 Months in US Prison
Related:Dutch Police Arrest Two Over NFC Relay Attacks That Drained $400,000+ From Bank Accounts
Related:Microsoft Disrupts Chinese-Language Phishing Market Behind 1B+ Messages
Related:Mastermind of 15,000-Mule Cybercrime Laundering Network Pleads Guilty in US
Written ByIonut Arghire
Ionut Arghire is an international correspondent for SecurityWeek.
Daily Briefing Newsletter
Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights.
Business Email*
emailsignupsource
Read our Privacy Policy for more information.
More from Ionut Arghire
- Adobe, Veeam, Juniper Networks Patch Critical Vulnerabilities
- Over 41,000 DHS Employee Records Leaked Online
- HHS Filing Puts iRhythm Data Breach Toll at 8.2 Million
- Chinese Hackers Quietly Used Low-Severity ESXi Logging Flaw as Zero-Day
- Ukrainian Hive and Nefilim Ransomware Affiliate Gets 70 Months in US Prison
- Chrome and Firefox Updates Patch Over 200 Vulnerabilities
- China-Linked Hackers Exploit PHP2Shell to Root Firewalls
- Hackers Start Probing Fresh Oracle EBS Vulnerability
Latest News
- Fresh WordPress Vulnerability in Attackers’ Crosshairs
- Drupal Commerce Core Vulnerability Exploited Against Online Stores
- $2 Million+ Drained From Polymarket Traders in New Supply Chain Attack
- Max-Severity GitLab Vulnerability Exploited Against Alpine Linux
- TeamViewer Flaw Could Let Malicious Hosts Take Over Support Technicians’ Machines
- $6 Billion Binance Hack Bears Hallmarks of North Korea’s TraderTraitor
- When Risk Becomes Personal: What Security Leaders Can Learn From a Cancer Diagnosis
- Google Touts Powerful Cybersecurity Capabilities in Gemini 4 Carbon Model
Trending
China-Linked Hackers Exploit PHP2Shell to Root Firewalls
Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages
Chrome and Firefox Updates Patch Over 200 Vulnerabilities
Chinese Hackers Quietly Used Low-Severity ESXi Logging Flaw as Zero-Day
CISA Warns of Node2Shell Exploitation as Honeypots Log Attack Attempts
Cisco SD-WAN Zero-Day Exploitation Tied to Volt Typhoon’s ‘Silent Train’ Network
Oracle Health Data Breach Tally Climbs to Nearly 20 Million
Hackers Start Probing Fresh Oracle EBS Vulnerability
Daily Briefing Newsletter
Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.
Business Email*
emailsignupsource
Read our Privacy Policy for more information.
Webinar: Agentic Pentesting for a Stronger CTEM Program
November 4, 2026
Close the security gaps between pentests. Join this session to explore agentic pentesting and gain a practical framework for continuous exposure validation in your CTEM program.
Register
Virtual Event: CISO Forum 2026 Summit
November 10 & 11, 2026
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
Register
People on the Move
Quantum eMotion has named Wayne Teeple as CTO.
Guy Ellis has been appointed CEO of NCC Group.
Noma Security has named Bobby Shoker as CFO and Alberto Rodrigues as CCO.
More People On The Move
Expert Insights
*
When Risk Becomes Personal: What Security Leaders Can Learn From a Cancer Diagnosis
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.(Steve Durbin)
Nobody Trusts the Security Questionnaire. We Rely on It Anyway.
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.(Sravish Sridhar)
This is Fine: What NetScaler Zero-Days Tell Us About the New Normal
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.(Tod Beardsley)
The Key to AI Software Security Isn’t Speed, It’s Maturity
Where your developers sit on the AI adoption scale has a real impact on how you are addressing security risk.(Matias Madou)
Context Is King in the Fight Against Modern Cyberattacks
Contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they escalate.(Etay Maor)