A malicious botnet named “Socks5Systemz” has been identified as the main mechanism behind the proxy service PROXY.AM, according to recent research by Bitsight.
“ malware and related services offer cybercriminals high levels of anonymity, allowing them to carry out attacks via infected systems without being detected,” Bitsight security team said in a detailed report published last week.
Read more: Socks5Systemz proxy botnet has infected over 10,000 devices
Socks5Systemz, which emerged on the cybercrime in March 2013, plays a central role in the distribution of malware such as PrivateLoader, SmokeLoader, and Amadey. Its main goal is to turn infected computers into proxy exit nodes, which are then sold to other cybercriminals. They use the nodes to hide the origin of attacks , enhancing their anonymity.
The illegal service PROXY.AM, which has been operating since 2016, describes itself as an "elite service, with private and anonymous proxy servers" and offers subscriptions ranging from $126 to $700 per month.
See also: OpenAI: Announces “12 Days of OpenAI”
As of January 2024, Socks5Systemz is estimated to have infected between 85,000 and 100,000 computers worldwide. The countries with the most infections include India, Indonesia, Ukraine, Algeria, Vietnam, Russia, Turkey, Brazil, Mexico, and Pakistan.
These findings come shortly after a report from Trend Micro, which described attacks that exploit poorly configured Docker Remote API, using the malware to carry out DDoS attacks.
Read more: Microsoft Office: Pirated versions distribute malware
At the same time, recent academic studies highlight the need for enhanced systems management and stricter monitoring, in order to prevent data leaks and other cyber threats.
Source: thehackernews
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
