FBI seizes Virtualine domain as TRM traces criminal crypto payments

TRM Labs has published new research tracing cryptocurrency payments to Virtualine, a hosting provider whose website domain the FBI seized on October 27. The October 28 report links payments to wallets TRM associates with a drug marketplace, ransomware groups, and other criminal services. Drug marketplace payments outweighed ransomware According to TRM’s analysis, a Russian drug marketplace accounted for about 44% of Virtualine’s direct cryptocurrency inflows, while ransomware groups were about 5%. A large sextortion scheme accounted for roughly 17%, while a cryptocurrency mixer, a service used to obscure transaction trails, contributed around 13%.