Remove tag ip-address
article thumbnail

Who and What is Behind the Malware Proxy Service SocksEscort?

Krebs on Security

Spur.us , a startup that tracks proxy services, told KrebsOnSecurity that the Internet addresses Lumen tagged as the AVrecon botnet’s “Command and Control” (C2) servers all tie back to a long-running proxy service called SocksEscort. com, and a few other proxy-related domains, including ip-score[.]com

Analytics 211