Tag: proxy service

3 Attack Reports | 0 Vulnerabilities

Attack reports

IPCola: A Tangled Mess

IPCola, a new proxy service, claims to have millions of active IPs sourced from IoT, Desktop, and Mobile devices. Investigation reveals connections to Gaganode, a decentralized bandwidth monetization service with features resembling a botnet. Gaganode's SDK includes remote code execution capabiliti…
iot
remote code execution
proxy service
2025-12-02
bandwidth monetization
chinese tv boxes
ipcola
instaip
nuochen technology
gaganode
popa
Published: December 2, 2025
Downloadable IOCs: 3

Socks5Systemz Botnet Powers Illegal Proxy Service with 85,000+ Hacked Devices

A malicious botnet called Socks5Systemz is operating a proxy service named PROXY.AM, utilizing over 85,000 compromised devices. The botnet, active since 2013, aims to turn infected systems into proxy exit nodes for cybercriminals seeking to obscure their attack sources. Initially boasting around 25…
botnet
amadey
cybercrime
smokeloader
proxy service
socks5systemz
2024-12-09
privateloader
exit nodes
hacked devices
proxy.am
Published: December 9, 2024
Downloadable IOCs: 2

One Sock Fits All: The use and abuse of the NSOCKS botnet

The ngioweb botnet serves as the foundation for the NSOCKS criminal proxy service, maintaining over 35,000 bots daily across 180 countries. The botnet primarily targets SOHO routers and IoT devices, with two-thirds of proxies based in the U.S. NSOCKS utilizes over 180 'backconnect' C2 nodes to obsc…
ddos
botnet
cybercrime
ngioweb
2024-11-19
nsocks
proxy service
soho routers
shopsocks5
iot devices
vn5socks
Published: November 19, 2024
Downloadable IOCs: 59
Click here to see more Attack Reports