Global Law Enforcement Dismantles SocksEscort Router Proxy Network
International law enforcement dismantled SocksEscort, a global residential-proxy botnet built from compromised routers and IoT devices. Officials say the botnet abused roughly 369,000 IPs across 163 countries and was rented to criminals for fraud, DDoS, ransomware and CSAM distribution. Audit and remediate SOHO routers and IoT devices: factory-reset, update firmware, change default credentials, isolate suspected devices and monitor for proxy or C2 traffic.