logo

DSLRoot, Proxies, and the Threat of ‘Legal Botnets’

ID: 7e58b45c-b4c7-5fb1-af05-48f6692b039f

STIX ID: report--7e58b45c-b4c7-5fb1-af05-48f6692b039f

Feed Name: Krebs on Security

Date Published: 2025-08-26

Date Updated: 2026-04-19

Author: BrianKrebs

...
...

This report investigates DSLRoot (aka GlobalSolutions), a residential proxy network that pays U.S. residents to host equipment and resells their IP addresses, tracing its history to Russian/Eastern European operators, linking accounts, domains, and emails to an individual (Andrei Holas), and detailing associated infrastructure. It cites forum activity, pay‑per‑install adware roots, and related services, while a technical analysis claims the installer can remotely control networking gear and enumerate nearby WiFi, with callbacks to proxysource.net. The piece underscores the security risks of hosting third‑party hardware, noting parallels with illicit laptop farms and the broader proliferation of “legal botnets.”

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.