Connect with us
DAPA Banner

Crypto World

SocksEscort Proxy Network Dismantled in Major Cybercrime Bust

Published

on

Brian Armstrong's Bold Prediction: AI Agents Will Soon Dominate Global Financial

Key Points

  • International authorities successfully dismantle SocksEscort network, confiscating 34 domains and 23 servers globally.
  • Criminal operation compromised more than 369,000 routers across 163 nations worldwide.
  • Law enforcement freezes $3.5 million in cryptocurrency linked to the illicit proxy service.
  • AVRecon malware served as the backbone for SocksEscort, facilitating fraud, ransomware distribution, and DDoS campaigns.
  • International collaboration demonstrates effective cross-border cooperation in combating sophisticated cybercrime.

A sophisticated international cybercrime operation has been successfully dismantled following coordinated action by Europol and United States law enforcement agencies. The operation targeted SocksEscort, an illicit proxy service that weaponized more than 369,000 compromised devices spanning 163 nations. Authorities confiscated multiple domains and servers while freezing $3.5 million in cryptocurrency assets, effectively terminating this extensive IP cloaking scheme.

The enforcement action resulted in the disconnection of compromised modems, rendering the criminal service inoperable. Affected nations will receive notification regarding infected routers within their jurisdictions to enable follow-up actions. This collaborative takedown represents a milestone achievement in global efforts to combat sophisticated cybercrime infrastructure.

The SocksEscort platform enabled threat actors to conceal their geographical locations while executing fraud schemes, ransomware campaigns, and various digital offenses. Operating as a commercial service, it provided access to over 35,000 proxy connections to paying customers seeking anonymous criminal operations. Law enforcement officials indicate this IP cloaking infrastructure enabled extensive attack campaigns and significant financial crimes.

Worldwide Criminal Infrastructure Exposed

Investigators documented SocksEscort operations spanning 163 countries, with infections affecting residential and small business networking equipment. The malicious infrastructure redirected internet communications through compromised devices, effectively obscuring the true origin points of criminal traffic. Thousands of victims in the United States and United Kingdom were identified, demonstrating the operation’s extensive international footprint.

Threat actors exploited this network to infiltrate banking systems and cryptocurrency platforms, while also submitting fraudulent financial claims. One documented U.S. victim suffered approximately $1 million in cryptocurrency losses attributed to attacks routed through this infrastructure. The criminal enterprise reportedly commenced operations in 2020 and experienced rapid expansion.

Advertisement

By February 2026, SocksEscort maintained access to 8,000 compromised routers, with 2,500 located within U.S. borders. Black Lotus Labs conducted extensive tracking of the botnet, identifying the AVRecon malware as the operational foundation. This IP cloaking infrastructure represented a substantial threat to global digital security.

Coordinated Enforcement Action and Continuing Probes

Europol and the Department of Justice spearheaded a synchronized enforcement operation, confiscating 34 domain names and 23 servers distributed across seven countries. U.S. authorities successfully froze $3.5 million in cryptocurrency directly associated with SocksEscort financial transactions. Compromised devices were systematically disconnected, eliminating the operational IP cloaking infrastructure.

Affected nations are receiving official notifications to facilitate continued investigations and potential prosecution efforts. The operation showcases the power of international coordination in neutralizing sophisticated cybercrime infrastructure. The disruption of this router-based IP cloaking operation will substantially hinder similar criminal activities moving forward.

SocksEscort specifically exploited small-office and home-office networking devices, providing criminals with capabilities to execute precision fraud operations. Law enforcement confirmed the proxy infrastructure facilitated ransomware deployment, distributed denial-of-service attacks, and illegal content distribution. The termination of SocksEscort eliminates one of the most extensive IP cloaking operations documented in recent years.

Advertisement

 

Source link

Advertisement
Continue Reading
Click to comment

You must be logged in to post a comment Login

Leave a Reply

Crypto World

StarkWare Cuts Jobs, Restructures Around Revenue Push

Published

on

StarkWare Cuts Jobs, Restructures Around Revenue Push

Zero-knowledge scaling company StarkWare is cutting jobs and restructuring its operations as it shifts from infrastructure development toward revenue-generating products. 

CEO Eli Ben-Sasson said in internal remarks that the firm will split into two business units and cut headcount to move faster and operate more efficiently, with one unit focused on applications and the other on Starknet development.

Ben-Sasson said the company would adopt a “startup mode” mindset, prioritizing fewer initiatives with higher revenue potential, while warning that downsizing would affect employees across the organization. StarkWare did not disclose how many employees would be affected by the cuts.

The move reflects a wider retrenchment across crypto firms, which have been trimming headcount and narrowing priorities as they chase clearer product-market fit, stronger monetization and leaner operations. Messari, Algorand Foundation and Crypto.com all announced cuts in March.

Advertisement
Source: Eli Ben-Sasson

StarkWare says technical edge must translate into revenue

Ben-Sasson said StarkWare’s next phase would center on turning its technology into “meaningful revenue” and “meaningful usage,” arguing that the company could no longer rely mainly on external blockchains or third-party teams to prove the value of its stack.

Ben-Sasson said the company would focus on “fewer things excellently” and prioritize products with revenue potential that can be built only on its technological stack. 

Related: Decentralized email platform Dmail to cease services on May 15

“We’re going to achieve this by innovating across not just infrastructure, as we’ve done so far, but across the whole stack of infrastructure and product,” he said. 

Crypto layoffs continue as firms tighten strategy

StarkWare’s cuts follow other recent layoffs across the crypto sector as firms narrow priorities and reshape operations. On March 17, Messari announced layoffs alongside a leadership change as the company moved deeper into artificial intelligence-powered research and data tools for institutions. 

Advertisement

On March 19, the Algorand Foundation said it would cut 25% of its employees, citing macro uncertainty and the broader crypto downturn. The organization said the move was aimed at better aligning resources with its long-term business, technology and ecosystem priorities.

On the same day, Crypto.com also announced a 12% reduction of its workforce as part of a broader push into AI. The exchange said the layoffs were tied to company-wide AI integration and a decision to prioritize resources around key growth areas.

Magazine: Asia Express: Phantom Bitcoin checks, China tracks tax on blockchain

Advertisement