CyberSecurityBoardThreat Intel · CVEs · Products
Malware

TheMoon Malware: Used in 5socks and Anyproxy Residential Proxy Services

June 25, 2026

TheMoon is a malware family that infected years-old Linksys and Cisco routers, turning them into residential proxies sold by services like 5socks and Anyproxy. The FBI and Justice Department dismantled these services in May 2025.