MoYu Group: The Threat Actor Behind BADBOX and Car Head Unit Malware
MoYu Group is a threat actor group attributed with high confidence to the BADBOX ad fraud and residential proxy scheme. They were…
Tag: proxy botnet
zhima: Reverse Proxy Module Used in Car Head Unit Malware
zhima is a reverse proxy module documented by Nokia Deepfield Emergency Response Team. It is selectively delivered via IPTV apps and now…
Android Car Head Unit Malware Spreads via Built-In Updaters for Ad Fraud and Proxy Botnet
Cybersecurity researchers have uncovered a new malware family specifically designed to infect Android-based vehicle head unit firmware developed by DoFun. Kaspersky, which…
Fake 7-Zip Installers Recruit Devices into Lurking Lizard Proxy Botnet
Cybersecurity researchers at Infoblox have uncovered a threat actor tracked as Lurking Lizard, operating an end-to-end malicious residential proxy business since at…
Lurking Lizard: Threat Actor Behind Residential Proxy Botnet
Lurking Lizard is a China-based threat actor operating an end-to-end malicious residential proxy business since at least August 2022. The actor uses…
WireVPN: Malicious VPN App Used in Proxy Botnet Campaign
WireVPN is a malware-laced VPN application used by Lurking Lizard to recruit devices into a residential proxy botnet. Available on Android, macOS,…
Qurium Research Links Popa to NetNut
Qurium, a security research firm, was part of the team that tied the Popa proxy botnet to NetNut, owned by Alarum Technologies.