November 19, 2024 at 09:42AM The Ngioweb malware powers the NSOCKS residential proxy service, with 80% of its bots originating from the Ngioweb botnet. This operation, involving over 20,000 IoT devices, allows users to proxy malicious traffic globally, facilitating attacks while obscuring identities. The underground proxy market is expected to grow significantly. ### Meeting Takeaways: … Read more
April 29, 2024 at 07:19AM Okta has warned of a surge in credential stuffing attacks utilizing anonymity services, such as Tor, and residential proxies. These attacks leverage stolen credentials to compromise online accounts. The increase in activity may be linked to a recent global brute-force campaign on VPN and SSH services. Okta recommends measures such … Read more
April 1, 2024 at 06:21AM Malicious Android apps on Google Play turned devices into proxies for threat actors. HUMAN’s Satori team identified 29 of these VPN apps, named PROXYLIB. Google removed them. These residential proxies help hide IP addresses but are misused by threat actors for attacks. LumiApps’ SDK is used to create and monetize … Read more
March 26, 2024 at 12:40PM Multiple free VPN apps on Google Play were found incorporating a malicious software development kit, transforming Android devices into residential proxies for potential cybercrime and shopping bots. These apps, originally promoting as VPN software, utilized the Proxylib SDK to convert devices into proxies without users’ knowledge. Google has taken action … Read more