SocksEscort Proxy Network Dismantled in Major Cybercrime Bust
Key Points International authorities successfully dismantle SocksEscort network, confiscating 34 domains and 23 servers globally. Criminal operation compromised more than 369,000 routers across 163 nations worldwide. Law enforcement freezes $3.5 million in cryptocurrency linked to the illicit proxy service. AVRecon malware served as the backbone for SocksEscort, facilitating fraud, ransomware distribution, and DDoS campaigns. International collaboration demonstrates effective cross-border cooperation in combating sophisticated cybercrime. A sophisticated international cybercrime operation has been successfully dismantled following coordinated action by Europol and United States law enforcement agencies. The operation targeted SocksEscort, an illicit proxy service that weaponized more than 369,000 compromised devices spanning 163 nations. Authorities confiscated multiple domains and servers while freezing $3.5 million in cryptocurrency assets, effectively terminating this extensive IP cloaking scheme. The enforcement action resulted in the disconnection of compromised modems, rendering the criminal service inoperable. Affected nations will receive notification regarding infected routers within their jurisdictions to enable follow-up actions. This collaborative takedown represents a milestone achievement in global efforts to combat sophisticated cybercrime infrastructure. The SocksEscort platform enabled threat actors to conceal their geographical locations while executing fraud schemes, ransomware campaigns, and various digital offenses. Operating as a commercial service, it provided access to over 35,000 proxy connections to paying customers seeking anonymous criminal operations. Law enforcement officials indicate this IP cloaking infrastructure enabled extensive attack campaigns and significant financial crimes. Worldwide Criminal Infrastructure Exposed Investigators documented SocksEscort operations spanning 163 countries, with infections affecting residential ...
Comments
Log in to comment