article thumbnail

Who and What is Behind the Malware Proxy Service SocksEscort?

Krebs on Security

Spur tracks SocksEscort as a malware-based proxy offering, which means the machines doing the proxying of traffic for SocksEscort customers have been infected with malicious software that turns them into a traffic relay. Usually, these users have no idea their systems are compromised. SocksEscort began in 2009 as “ super-socks[.]com

Malware 209
article thumbnail

Tricky Phish Angles for Persistence, Not Passwords

Krebs on Security

What’s more, Tyler said the malicious app they tested was not visible as an add-in at the individual user level; only system administrators responsible for managing user accounts could see that the app had been approved.

Phishing 247