logo

US and European authorities disrupt socksEscort proxy service tied to AVrecon botnet

ID: bbe68a6e-8cbb-5560-ac2b-0fed8d2dbdc1

STIX ID: report--bbe68a6e-8cbb-5560-ac2b-0fed8d2dbdc1

Feed Name: Security Affairs

Threat Score
82/100

Date Published: 2026-03-13

Date Updated: 2026-04-22

Author: Pierluigi Paganini

...
...

Law enforcement in the US and Europe dismantled SocksEscort, a criminal proxy service powered by the AVrecon botnet that since 2020 compromised roughly 369,000 routers and IoT devices across 163 countries to provide anonymized proxy access for ransomware, DDoS, fraud, and illegal content distribution; authorities seized domains, servers, and cryptocurrency, and advised vendors and users to update device firmware to mitigate exploitation.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.