2025 State of the Internet: Digging into Residential Proxy Infrastructure
ID: 50d18905-a4cf-5a2e-831b-f567fbf0851c
STIX ID: report--50d18905-a4cf-5a2e-831b-f567fbf0851c
Feed Name: Censys Blog
Date Published: 2025-08-14
Date Updated: 2026-04-27
Author: Jean Pierre Ruiz Ocampo; The Censys Research Team
Censys Research Team issues an update clarifying that TLS certificates previously thought to link an RPX server to the PolarEdge malware also appear in older Mbed TLS (PolarSSL) test files, reducing confidence in direct attribution; investigators now believe the actor likely reused publicly available certificates and that the RPX server was either attacker infrastructure or a relay.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
