logo

2025 State of the Internet: Digging into Residential Proxy Infrastructure

ID: 50d18905-a4cf-5a2e-831b-f567fbf0851c

STIX ID: report--50d18905-a4cf-5a2e-831b-f567fbf0851c

Feed Name: Censys Blog

Threat Score
25/100

Date Published: 2025-08-14

Date Updated: 2026-04-27

Author: Jean Pierre Ruiz Ocampo; The Censys Research Team

...
...

Censys Research Team issues an update clarifying that TLS certificates previously thought to link an RPX server to the PolarEdge malware also appear in older Mbed TLS (PolarSSL) test files, reducing confidence in direct attribution; investigators now believe the actor likely reused publicly available certificates and that the RPX server was either attacker infrastructure or a relay.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.