Actor "Liberland" advertises no-KYC "abuse-resistant" Libre VPS/VDS hosting with XMR payments
An actor using the handle Liberland is advertising a hosting service branded Libre, offering "bulletproof" or abuse-resistant VPS and VDS servers. The listing claims no registration, no email, no KYC and no logs, with cryptocurrency payments including XMR, and rental terms starting at one month. Customers get full root access, multiple operating systems, remote access over RDP/VNC/SSH, extra IP addresses and technical support. Dark Web Informer states that none of the provider's infrastructure, privacy claims, abuse-handling practices or availability have been independently verified. The service is not confirmed to be used in any specific intrusion.
Detalhes técnicos
- Advertised operating systems: Windows, Linux, Kali, Ubuntu, Debian and CentOS, with custom ISO installation.
- Connectivity: RDP, VNC and SSH, with additional IP addresses available.
- Extras: virtualization support, server-management software installation, control-panel installation, system reinstalls, and graphics-enabled servers for Android emulators.
- The article reports a service domain and a Telegram bot as identifiers, but does not reproduce them. No malware hash, Tox ID, Session ID or attacker-controlled IP address is visible.
- Analytical mapping (inferred, not confirmed): T1583.003 Acquire Infrastructure: Virtual Private Server. If the service works as advertised, the combination of no-KYC provisioning, crypto payments, claimed no-logging and full admin access could suit phishing, malware hosting, C2, credential theft or fraud infrastructure.
Remediação
The article gives no remediation guidance. Defenders can use the service domain and Telegram bot identifiers, available from the source, for correlation and monitoring. These identifiers do not prove the provider's infrastructure or claims.
Linha do tempo
-
Actor "Liberland" advertises no-KYC "abuse-resistant" Libre VPS/VDS hosting with XMR payments
ler a análise desta fonte ocultar
An actor using the handle Liberland is advertising a hosting service branded Libre, offering "bulletproof" or abuse-resistant VPS and VDS servers. The listing claims no registration, no email, no KYC and no logs, with cryptocurrency payments including XMR, and rental terms starting at one month. Customers get full root access, multiple operating systems, remote access over RDP/VNC/SSH, extra IP addresses and technical support. Dark Web Informer states that none of the provider's infrastructure, privacy claims, abuse-handling practices or availability have been independently verified. The service is not confirmed to be used in any specific intrusion.
Technical Details
- Advertised operating systems: Windows, Linux, Kali, Ubuntu, Debian and CentOS, with custom ISO installation.
- Connectivity: RDP, VNC and SSH, with additional IP addresses available.
- Extras: virtualization support, server-management software installation, control-panel installation, system reinstalls, and graphics-enabled servers for Android emulators.
- The article reports a service domain and a Telegram bot as identifiers, but does not reproduce them. No malware hash, Tox ID, Session ID or attacker-controlled IP address is visible.
- Analytical mapping (inferred, not confirmed): T1583.003 Acquire Infrastructure: Virtual Private Server. If the service works as advertised, the combination of no-KYC provisioning, crypto payments, claimed no-logging and full admin access could suit phishing, malware hosting, C2, credential theft or fraud infrastructure.
Remediation
The article gives no remediation guidance. Defenders can use the service domain and Telegram bot identifiers, available from the source, for correlation and monitoring. These identifiers do not prove the provider's infrastructure or claims.