Advertising Malware VPN 
Krebs on Security
APRIL 18, 2023
For the past seven years, a malware-based proxy service known as “ Faceless ” has sold anonymity to countless cybercriminals. For less than a dollar per day, Faceless customers can route their malicious traffic through tens of thousands of compromised systems advertised on the service. Image: spur.us.
Krebs on Security
JULY 18, 2022
911 says its network is made up entirely of users who voluntarily install its “free VPN” software. In this scenario, users indeed get to use a free VPN service, but they are often unaware that doing so will turn their computer into a proxy that lets others use their Internet address to transact online. “The 911[.]re
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
Krebs on Security
JULY 25, 2023
Researchers this month uncovered a two-year-old Linux-based remote access trojan dubbed AVrecon that enslaves Internet routers into botnet that bilks online advertisers and performs password-spraying attacks. ” According to Kilmer, AVrecon is the malware that gives SocksEscort its proxies.
eSecurity Planet
APRIL 21, 2025
A notorious Russian hosting service provider known as Proton66 is at the center of a series of widespread cyberattacks and malware campaigns targeting organizations and users worldwide, according to fresh findings from cybersecurity experts. The malware connects to a C2 server at 193.143.1.139. “Net blocks 45.135.232.0/24
eSecurity Planet
MARCH 10, 2025
Disguised as a legitimate bypass tool The malware campaign exploits users need to overcome online restrictions. Attackers package the SilentCryptoMiner within archives advertised as deep packet inspection (DPI) bypass utilities. In reality, the archive includes a Python-based loader that eventually retrieves the miner payload.
Krebs on Security
OCTOBER 8, 2020
Each day, millions of malware-laced emails are blasted out containing booby-trapped attachments. From there, the infected system will report home to a malware control server operated by the spammers who sent the missive. Samuil is the handle used by the proprietor of multi-vpn[.]biz ” WHO IS DR. SAMUIL?
Krebs on Security
MAY 28, 2024
Department of the Treasury today unveiled sanctions against three Chinese nationals for allegedly operating 911 S5 , an online anonymity service that for many years was the easiest and cheapest way to route one’s Web traffic through malware-infected computers around the globe. based startup that tracks proxy and VPN services.
Expert insights. Personalized for you.
312 
Let's personalize your content