FBI Seizes Virtualine Domain as Bulletproof Hosting Networks Evade Wider Crackdown
The FBI seized virtualine[.]net on October 27 under Operation Omegaline, disrupting Virtualine Technologies, which the Justice Department says also operated as Omegatech. Silent Push had observed infrastructure migrating from Railnet LLC to Omegatech in February 2026; after the seizure, Omegatech remained partially reachable but showed very low routing visibility. The action adds to enforcement and sanctions pressure on bulletproof hosting providers, including THE.Hosting, Media Land and Aeza Group. Silent Push reported that 50 providers it tracks lost their autonomous system numbers (ASNs) over the preceding year, while cautioning that losing an ASN does not necessarily mean an operator has stopped operating. Related investigations show how hosting networks survive disruption through replacement ASNs, shell companies and infrastructure transfers. Reporting has linked Stark Industries Solutions and MIRhosting to infrastructure supporting pro-Russian DDoS campaigns, proxy services and other malicious activity. ELLIO subsequently traced scanning and exploitation across infrastructure associated with Stark, PQ Hosting and THE.Hosting following EU sanctions. Dutch investigators seized more than 800 servers and arrested two people in May 2026, yet THE.Hosting’s primary network, AS209847, continued scanning through at least May 26. Observed activity included credential attacks, database and industrial-protocol reconnaissance, and Mirai-related payloads; ELLIO cautioned that some scanning likely originated from a separate hosting customer rather than NoName057(16). Defenders should treat domain seizures and ASN losses as disruptions, not proof of shutdown, refresh blocklists frequently, monitor network migrations and allocation changes, screen against both US and EU sanctions lists, and strengthen hosting-customer verification.. Fonte: https://mallory.ai/stories/01a17f0a-fbb9-766d-86ac-0e5c61df5e59
Itagora tiene in archivio titolo e sommario per la ricerca interna. Il testo completo resta sulla fonte. Il link in uscita non invia referrer.