Notorious Malware, Spam Host “Prospero” Moves to Kaspersky Lab

**Prospero OOO (BEARHOST/Securehost) — a long-standing bulletproof hosting provider used to host malware, botnet C2s, phishing sites and ransomware infrastructure (including operations tied to SocGholish and GootLoader) — has been observed routing its traffic through networks operated by Kaspersky Lab; security firms (Intrinsec, Spamhaus, Kentik) reported high spam/malicious hosting scores for Prospero and the routing relationship began in December 2024, while Kaspersky denies direct cooperation and suggests the routing may be transit or related to DDoS protection services.**