Fake 7-Zip Installers Recruit Devices into Lurking Lizard Proxy Botnet
Cybersecurity researchers at Infoblox have uncovered a threat actor tracked as Lurking Lizard, operating an end-to-end malicious residential proxy business since at…
Tag: residential proxy
Lurking Lizard: Threat Actor Behind Residential Proxy Botnet
Lurking Lizard is a China-based threat actor operating an end-to-end malicious residential proxy business since at least August 2022. The actor uses…
IPIDEA: Residential Proxy Provider
IPIDEA is a residential proxy provider whose infrastructure was dismantled by Google in January 2026. It was impersonated by Lurking Lizard in…
SmartProxy (Decodo): Proxy Provider
SmartProxy, now known as Decodo, is a proxy provider impersonated by Lurking Lizard. Proxyway found that 773,087 IPs linked to SmartProxy were…
NetNut (Popa): Residential Proxy Network
NetNut, also known as Popa, is a residential proxy network that compromised at least 2 million devices through malware-laced SDKs. Google significantly…
Google Disrupts NetNut Residential Proxy Network with 2 Million Home Devices
Google's Threat Intelligence Group (GTIG), in collaboration with the FBI, Lumen, and other partners, has significantly disrupted NetNut, a massive residential proxy…
NetNut Residential Proxy Network Disrupted by Google
NetNut, also known as Popa, is a residential proxy network that turns home devices into exit nodes for malicious traffic. Google and…
94% of Incidents Involve Anonymized Infrastructure: Study Reveals Reactive Security Gaps
A recent industry study conducted by Spur Intelligence, surveying over 200 security practitioners, reveals that anonymizing infrastructure—including VPNs and residential proxy networks—now…
Spur Intelligence: Leading IP Intelligence and Threat Research
Spur Intelligence is a cybersecurity company specializing in IP intelligence, threat research, and infrastructure classification. Their recent study on anonymized infrastructure highlights…
TheMoon Malware: Used in 5socks and Anyproxy Residential Proxy Services
TheMoon is a malware family that infected years-old Linksys and Cisco routers, turning them into residential proxies sold by services like 5socks…