US and Dutch Authorities Disrupt Massive Proxy-Botnet, Arrest Four Suspects

By Netvora Tech News

In a major joint operation, the US and Dutch authorities have taken down a massive proxy-botnet comprising thousands of outdated Wi-Fi routers. The botnet, which was operating since 2004, was used to compromise vulnerable routers and sell access to malicious actors. The suspects, four individuals from Russia and Kazakhstan, have been arrested and charged with multiple counts.

The proxy-botnet, which used services called Anyproxy and 5socks, allowed cybercriminals to exploit the vulnerable routers for various malicious purposes, including launching cyberattacks. The routers, many of which were no longer supported by their manufacturers, were compromised using well-known vulnerabilities.

According to the US authorities, the suspects made over $46 million in profits from selling access to the compromised routers. The FBI seized the domain names of the proxy-service and took down the associated servers.

How the Proxy-Botnet Operated

The proxy-botnet worked by using the compromised routers as proxy servers, allowing cybercriminals to bypass security measures and conduct malicious activities anonymously. The routers were advertised as part of the proxy-service, which claimed to be active since 2004.

The proxy-botnet was used to compromise vulnerable routers, including end-of-life Cisco and Linksys devices.
The compromised routers were used to launch cyberattacks and conduct malicious activities.
The suspects made significant profits by selling access to the compromised routers.

International Cooperation and Implications

The takedown of the proxy-botnet is a significant example of international cooperation in combating cybercrime. The US Department of Justice praised the collaboration with the Dutch authorities and the Openbaar Ministerie in the operation.

The incident serves as a warning to individuals and organizations to prioritize the security of their devices, particularly outdated ones. The FBI had previously warned of the risks associated with using end-of-life devices and recommended replacing them with more secure alternatives.

The authorities' efforts to disrupt the proxy-botnet are a significant step in combating the growing threat of cybercrime. As the reliance on technology continues to grow, it is essential to remain vigilant and proactive in addressing these threats.