Who and What is Behind the Malware Proxy Service SocksEscort?
Krebs on Security
JULY 25, 2023
Spur.us , a startup that tracks proxy services, told KrebsOnSecurity that the Internet addresses Lumen tagged as the AVrecon botnet’s “Command and Control” (C2) servers all tie back to a long-running proxy service called SocksEscort. Another domain with the Google Analytics code US-2665744 was sscompany[.]net.
Let's personalize your content