SocksEscort is a organization tracked across 6 threat clusters and 10 intelligence report mentions on ThreatCluster. First observed March 12, 2026; most recent activity June 22, 2026.
On March 11, 2026, international law enforcement agencies executed Operation Lightning, dismantling the SocksEscort proxy network, which had compromised over 369,000 routers and IoT devices across 163 countries. The…
On March 20, 2026, the U.S. Justice Department, in collaboration with law enforcement from Canada and Germany, announced the dismantling of four significant botnets: Aisuru, KimWolf, JackSkid, and Mossad. These botnets…
The AryStinger botnet has infected more than 4,300 D-Link routers, specifically the DIR-850L and DIR-818LW models, which are no longer supported by the manufacturer. This malware, identified by researchers at Qianxin's…
Dutch police, in collaboration with the National Cyber Security Centre (NCSC), have dismantled a massive botnet comprising over 17 million infected devices. The operation involved seizing more than 200 servers located…
The FBI has issued warnings regarding 18 popular router models that have been compromised in a malware operation, as detailed in a FLASH notice dated March 12, 2026. These routers, including models from D-Link, Netgear,…
Europol, alongside various law enforcement agencies, has successfully dismantled the SocksEscort proxy botnet, which had compromised over 369,000 routers and IoT devices globally. The operation led to the freezing of…