logo

Despite multiple takedowns, botnets continue to grow

ID: 593c76f5-f636-55d4-91db-162bf4d52ec9

STIX ID: report--593c76f5-f636-55d4-91db-162bf4d52ec9

Feed Name: CyberScoop

Threat Score
78/100

Date Published: 2026-07-24

Date Updated: 2026-07-25

Author: Matt Kapko

...
...

Black Lotus Labs warns that residential-proxy-powered botnets are proliferating and approaching ~60 million victim IPs globally (about 25% in the U.S.), with many proxy services collaborating to form a resilient, hard-to-disrupt ecosystem; operators can rapidly rebuild (example: IPIDEA rebounded to ~10 million IPs) and more than 30 distinct malicious proxy clusters regularly exceed 100,000 daily victims, creating a large-scale cybercrime threat that enables evasion and mass IP movement.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.