ThreatCluster

Europol Seizes $3.5M in Crypto from Dismantled SocksEscort Proxy Botnet

First seen 14 Mar 2026, 00:13 UTC Mexc 72% similarity 68

Article Content

Browse articles
ThreatCluster

Europol, alongside various law enforcement agencies, has successfully dismantled the SocksEscort proxy botnet, which had compromised over 369,000 routers and IoT devices globally. The operation led to the freezing of $3.5 million in cryptocurrency linked to the botnet's operators. The SocksEscort network was primarily used for malicious activities, including facilitating DDoS attacks and other cybercrimes. The botnet exploited vulnerabilities in consumer-grade routers and IoT devices, allowing attackers to gain unauthorized access and control. This operation marks a significant step in combating cybercrime, with authorities emphasizing the need for improved security measures in IoT devices. Currently, investigations are ongoing to identify and prosecute the individuals behind the botnet. The dismantling of SocksEscort highlights the growing trend of using proxy networks for cybercriminal activities. Law enforcement agencies are urging organizations and individuals to secure their devices against such threats.

Key Points: • Europol dismantled the SocksEscort proxy botnet affecting over 369,000 devices. • The operation resulted in the freezing of $3.5 million in cryptocurrency. • SocksEscort was used for DDoS attacks and exploited vulnerabilities in IoT devices.

ThreatCluster AI

Timeline

2026-03-13
Europol announces the dismantling of SocksEscort botnet.
2026-03-13
Europol freezes $3.5 million in cryptocurrency.
Date unknown
SocksEscort botnet compromised over 369,000 devices.

Community

Browse all →