FBI seizes Virtualine domain as TRM traces criminal crypto payments

TRM Labs has published new research tracing cryptocurrency payments to Virtualine, a hosting provider whose website domain the FBI seized on October 27. The October 28 report links payments to wallets TRM associates with a drug marketplace, ransomware groups, and other criminal services. Drug marketplace payments outweighed ransomware According to TRM’s analysis, a Russian drug marketplace accounted for about 44% of Virtualine’s direct cryptocurrency inflows, while ransomware groups were about 5%. A large sextortion scheme accounted for roughly 17%, while a cryptocurrency mixer, a service used to obscure transaction trails, contributed around 13%. TRM also identified payments from StealC, malware designed to steal information, and another hosting provider called Volhav. TRM based its breakdown on payments received by Bitcoin addresses it associates with Virtualine.

BeCrypto News shows a short excerpt and links to the publisher. The full report belongs to AMBCrypto.