国际执法行动查封「防弹主机」网站virtualine.net：司法部指其为网络犯罪提供托管、涉未成年人影像与国际洗钱
美国司法部弗吉尼亚东区联邦检察官办公室（USAO-EDVA）与联邦调查局（FBI）10月27日宣布，在一项国际执法行动中，法院授权查封了「防弹主机」服务商 Virtualine 的网站 virtualine.net。司法部指，该网站被用于大量犯罪活动，包括刊登未成年人的性剥削影像、披露非自愿私密影像，以及国际洗钱。
据行动分析伙伴 Chainalysis 公布的案情，Virtualine 曾在 Exploit.in 等网络犯罪论坛公开向犯罪社群招揽客户，其服务器被指托管勒索软件的控制设施、信息窃取程序、钓鱼活动与非法市场。2026年3月，该公司推出所谓「额外保护计划」，在执法机关提出要求时把客户基础设施转移到无关的空壳公司名下重新上线。Chainalysis 的链上分析显示，Virtualine 直接收取非托管比特币钱包付款并清洗资金，其地址与勒索软件运营者及网络犯罪论坛直接关联。
FBI 华盛顿外勤办公室参与了查封行动，多国警方以及 Chainalysis、OverRIPE 等民间机构提供了协作。所谓「防弹主机」，指以无视滥用投诉、协助客户逃避执法为卖点的主机服务，长期被视为勒索软件与钓鱼犯罪的基础设施环节。
上述内容目前均为执法机关与检方指控。网络安全公司 Silent Push 的分析记录显示，Virtualine 一方已公开否认相关指控，并称客户数据安全；该公司网络在查封后未完全离线。案件后续进展有待法院程序与官方进一步公布。
International Operation Seizes Bulletproof Hosting Site Virtualine.net: DOJ Alleges Cybercrime Hosting, Exploitation Imagery and Money Laundering
The U.S. Attorney's Office for the Eastern District of Virginia and the Federal Bureau of Investigation announced on October 27 the court-authorized seizure of virtualine.net, the website of the offshore "bulletproof hosting" provider Virtualine, in an international law enforcement operation. The Justice Department said the website was seized after being used for prolific criminal activity, including advertising sexually explicit images of minors, disclosure of nonconsensual intimate visual depictions, and international money laundering.
According to Chainalysis, an analytics partner in the operation, Virtualine openly solicited clients from the cybercrime community on forums such as Exploit.in, and its infrastructure allegedly hosted ransomware control servers, information stealers, phishing operations and illegal markets. In March 2026 it launched an "Extra Protection Plan" that moved client infrastructure to unrelated shell companies and relaunched it when law enforcement requests arrived. Chainalysis said the company accepted payments through unhosted Bitcoin wallet addresses and laundered the funds, and that its addresses were directly linked to ransomware operators and cybercrime forums.
The FBI's Washington Field Office took part in the seizure, with assistance from police forces in multiple countries and private-sector contributors including Chainalysis and OverRIPE. So-called bulletproof hosts market themselves on ignoring abuse complaints and helping clients evade law enforcement, and are regarded as a key infrastructure layer for ransomware and phishing crime.
The allegations remain accusations by law enforcement and prosecutors. Analysis by security firm Silent Push records that Virtualine has publicly disputed the allegations and said its data was safe, and that its network was not fully offline after the seizure. Further developments await court proceedings and additional official announcements.
来源：GSM·美国（原文链接）
图片来源：位于华盛顿的联邦调查局总部胡佛大楼。Ajay Suresh 摄，CC BY 2.0，经 Wikimedia Commons。 / The J. Edgar Hoover Building, FBI headquarters in Washington. Photo by Ajay Suresh, CC BY 2.0, via Wikimedia Commons.
