logo

VPNs & Fake Updates: Google Dismantles Massive IPIDEA Proxy Network

ID: 2ec1451c-edd6-5409-9dee-33f1d4549bba

STIX ID: report--2ec1451c-edd6-5409-9dee-33f1d4549bba

Feed Name: securityonline.info

Threat Score
75/100

Date Published: 2026-01-31

Date Updated: 2026-04-23

Author: Ddos

...
...

Google Threat Intelligence Group and partners disrupted IPIDEA, a large residential proxy network that secretly turned user devices into exit nodes by embedding malicious SDKs in over 600 mobile apps (including fake VPNs) and trojanized Windows binaries (3,075 PE hashes); mitigation included Google Play Protect removals, legal domain seizures, and law enforcement coordination.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.