A joint U.S.-Dutch law enforcement operation successfully dismantled a large botnet composed of over 7,000 outdated routers used for malicious proxy services. The operation involved international agencies and resulted in indictments against four foreign nationals involved in running the botnet and generating over $46 million in illicit profits. (Affected: Infected routers, internet users, network infrastructure)
Keypoints :
- The operation targeted a botnet created by infecting end-of-life wireless routers worldwide.
- Malware allowed compromised routers to provide unauthorized access and act as proxy servers on the internet.
- The botnet operated through the domains Anyproxy.net and 5socks.net, managed by a Virginia-based company.
- The 5socks.net website advertised over 7,000 proxy servers for sale, with subscription fees up to $110 per month.
- Four foreign nationals, including Russian and Kazakhstani individuals, were charged with conspiracy and related crimes.
- Law enforcement agencies from the U.S., Netherlands, and Thailand collaborated, along with Lumen Technologies’ Black Lotus Labs.
- The FBI listed 13 vulnerable routers and advised users to replace or disable affected devices to prevent infection.
Read More: https://thecyberexpress.com/end-of-life-routers-botnet-taken-down/