article thumbnail

Law enforcement shutdown the VPN service VPNLab used by many cybercriminal gangs

Security Affairs

Europol this week announced the shutdown of VPNLab, a VPN service that is very popular in the cybercrime ecosystem. An international operation conducted by law enforcement bodies from 10 countries took down VPNLab.net, a VPN service provider that is very popular in the cybercrime ecosystem. Europol said.

VPN 81
article thumbnail

Stark Industries Solutions: An Iron Hammer in the Cloud

Krebs on Security

PROXY WARS Security experts say that not long after the war started, Stark began hosting dozens of proxy services and free virtual private networking (VPN) services, which are designed to help users shield their Internet usage and location from prying eyes. is a company that tracks VPNs and proxy services worldwide.

DDOS 274
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Who and What is Behind the Malware Proxy Service SocksEscort?

Krebs on Security

Proxy services can be used in a legitimate manner for several business purposes — such as price comparisons or sales intelligence — but they are massively abused for hiding cybercrime activity because they make it difficult to trace malicious traffic to its original source. SocksEscort began in 2009 as “ super-socks[.]com com , segate[.]org

Malware 211
article thumbnail

Cybercriminals’ friend VPNLab.net shut down by law enforcement

Malwarebytes

VPNLab had been around since 2008 and had built its service around the OpenVPN technology, used strong encryption, and provided double VPN, with servers located in many different countries. What is double VPN? Double VPN is basically what the name suggests. Double VPN is not a common feature, because it is very slow.

VPN 76
article thumbnail

Who Is the Network Access Broker ‘Babam’?

Krebs on Security

Since the beginning of 2020, Babam has set up numerous auctions on the Russian-language cybercrime forum Exploit , mainly selling virtual private networking (VPN) credentials stolen from various companies. back in 2008 (notice again the suspect “www” as part of the domain name). com and wwwpexpay[.]com.

article thumbnail

Who is the Network Access Broker ‘Wazawaka?’

Krebs on Security

More commonly, the infected PC or stolen VPN credentials the gang used to break in were purchased from a cybercriminal middleman known as an initial access broker. This post examines some of the clues left behind by “ Wazawaka ,” the hacker handle chosen by a major access broker in the Russian-speaking cybercrime scene.

DDOS 273
article thumbnail

New Kraken botnet is allowing operators to earn USD 3,000 every month

Security Affairs

Experts pointed out that despite having the same name, this botnet should not be confused with the Kraken botnet that was spotted in 2008. It leverages the RedLine Stealer to siphon credentials, credit card data, cookies, autocomplete information stored in browsers, cryptocurrency wallets, credentials stored in VPN clients and FTP clients.

VPN 92