Police dismantles botnet selling hacked routers as residential proxies

Law enforcement agencies dismantled a two-decade botnet that infected thousands of end-of-life routers with a variant of TheMoon malware to run residential proxy services (Anyproxy and 5socks); four individuals were indicted and authorities warned that the compromised routers were used to anonymize a range of criminal activities, with evidence including targeted router models and operational infrastructure details.