#residentialproxies — Public Fediverse posts

@techlore Still some work to do but much better, plus their Android app is on #fdroid.

#urnetwork #dvpn #vpn #residentialproxy #residentialproxies #circumvention #censorship #censorshipcircumvention #opensource #freesoftware #selfhosted

#Bitdefender has identified a #malware campaign "#MidnightMimosa", running on low-cost multi-brand #Android device using #MediaTek SoC.

The malware ships in firmware, silently installs newer apps & deploys payloads for #AdFraud & #ResidentialProxies.

🔗 https://www.bitdefender.com/en-us/blog/labs/midnight-mimosa-malware

How to detect residential proxies with a WorldIP.io beta key

WorldIP.io detects residential and mobile proxy exits, VPNs, Tor and iCloud Private Relay. Until its paid plans launch, issued.live Plus and Pro subscribers get a free WorldIP.io beta key.

https://worldip.io/news/how-to-detect-residential-proxies

#proxydetection #fraudprevention #ipintelligence #residentialproxies

Frankfurt network update. 🇩🇪

New residential IPs from UAB Init ISP are now available in Frankfurt, Germany.

Another German endpoint for regional testing, development, and supported workflows.

Explore them at ProxySocks5.com.

#Frankfurt #ResidentialProxies #Germany

Austin, Texas is live. 🤠🇺🇸

New residential IPs from a Tier 1 ISP, available across our full lineup:

• HTTP Proxy
• SOCKS5 Proxy
• Shadowsocks
• Trojan
• WireGuard VPN

Another US location for your setup.

ProxySocks5.com

#ResidentialProxies #AustinTX #SOCKS5 #WireGuard

https://www.youtube.com/watch?v=6IFVTcM28KA

216,000,000 Spy TVs | The LG Smart TV Problem - Gamers Nexus

Hacked residential proxy bot networks love your IOT devices and smart tvs. They are thriving and increasing your power bills at the same time.

https://spur.us/blog/smart-tv-apps-residential-proxy-sdks

https://people.kernel.org/monsieuricon/creepy-crawlies

#bots #residentialproxies #infosec #surveillance #hacking #LG #smarthome #iot

Kansas is live.

New dedicated, static residential IPs are now available through:

• HTTP Proxy
• SOCKS5 Proxy
• Shadowsocks
• Trojan
• WireGuard VPN

Another central US location added to the network. 🇺🇸

#ResidentialProxies #Kansas #SOCKS5 #WireGuard

🚨 Oh no, the sky is falling! Residential proxies are the latest bogeyman in the tech world! Apparently, having your internet traffic rerouted through Grandma's WiFi is the ultimate national security threat. 😂 Clearly, we should all abandon the internet and revert to smoke signals to stay safe. 🕵️‍♂️🔍
https://jacob.gold/posts/residential-proxies-are-a-national-security-threat/ #internetsecurity #residentialproxies #technews #cybersecurity #humor #HackerNews #ngated

Residential Proxies Are a National Security Threat

https://jacob.gold/posts/residential-proxies-are-a-national-security-threat/

Comments: https://news.ycombinator.com/item?id=49078266

#HackerNews #ResidentialProxies #NationalSecurity #CyberThreats #InternetSafety #PrivacyConcerns

Your LG smart TV could be routing someone else’s internet traffic: LG is removing apps behind the hidden proxies – Firstpost

If you own an LG TV, there is a chance that one of your seemingly harmless apps could…
#EuropeSays #Korea #KR #LG #LGGroup #Lgnew.Samsung #Residentialproxies
https://www.europesays.com/korea/100036/

"Spur argues the problem is not that residential proxy networks exist, but rather that they are being embedded at scale in devices that most consumers do not think of as computers and are not equipped to audit.

“A one-time consent prompt buried in a TV app is not a substitute for meaningful transparency, ongoing control, and platform oversight,” Spur’s Trevor Sutter wrote. “The risk is amplified when consent comes from individuals within the household who use the device but shouldn’t give consent, such as minors.”

LG’s announcement that it is culling residential proxy SDKs from its app store is welcome news, but the company recently came under fire for another questionable partnership: Pimping McAfee security products via software drivers included in its high-end LCD monitors.

Earlier this week, the Youtube channel Gamers Nexus showed that certain LG LCD monitors will automatically install an app that promotes paid McAfee antivirus subscriptions, and that the app arrives through Windows Update without an approval prompt."

https://krebsonsecurity.com/2026/07/lg-to-ban-residential-proxies-from-smart-tv-apps/

#CyberSecurity #LG #ResidentialProxies #SmartTV

#LG to Ban #ResidentialProxies from #SmartTV Apps

The home appliance giant #LGElectronics USA said this week it plans to suspend any apps built for its smart TVs that turn one’s #television into an always-on residential #proxy node. The move comes less than a month after researchers found that more than 42 percent of games and other apps available for download on LG’s #webOS store allow unknown third-parties to route their Internet traffic through a user’s #TV.
#residentialproxy #security #privacy

https://krebsonsecurity.com/2026/07/lg-to-ban-residential-proxies-from-smart-tv-apps/

RE: https://infosec.exchange/@briankrebs/116960969908967244

Excellent to see device manufacturers taking steps like these to get rid of #residentialproxies - much-needed!

LG to Ban Residential Proxies from Smart TV Apps

https://krebsonsecurity.com/2026/07/lg-to-ban-residential-proxies-from-smart-tv-apps/

Comments: https://news.ycombinator.com/item?id=49000864

#HackerNews #LG #SmartTV #ResidentialProxies #Ban #SecurityTech #PrivacyIssues

LG to Ban Residential Proxies from Smart TV Apps

https://krebsonsecurity.com/2026/07/lg-to-ban-residential-proxies-from-smart-tv-apps/

#InternetofThings(IoT) #residentialproxies #LGElectronicsUSA #ALittleSunshine #TheComingStorm #TrevorSutter #BrightData #JohnTaylor #Samsung #Tizen #webOS #Spur

New, exclusive, by me: LG to Ban Residential Proxy Providers from Smart TV Apps

The home appliance giant LG Electronics USA said this week it plans to suspend any apps built for its smart TVs that turn one’s television into an always-on residential proxy node. The move comes less than a month after researchers found that more than 42 percent of games and other apps available for download on LG’s webOS store allow unknown third-parties to route their Internet traffic through a user’s TV.

https://krebsonsecurity.com/2026/07/lg-to-ban-residential-proxies-from-smart-tv-apps/

#smarttv #lg #residentialproxies #spur #security

Twój domowy router na celowniku rosyjskich hakerów. Służby ostrzegają przed kampanią FSB

Agencje cyberbezpieczeństwa z całego świata, w tym amerykańska CISA oraz służby z Wielkiej Brytanii, Australii i Nowej Zelandii, wydały pilne ostrzeżenie dla użytkowników routerów domowych oraz małych biur.

Państwowe grupy hakerskie powiązane z rosyjską Federalną Służbą Bezpieczeństwa (FSB) prowadzą masowe, zautomatyzowane skany w celu przejęcia kontroli nad słabo zabezpieczonym sprzętem sieciowym. Po przejęciu urządzenia nie służą one jednak do atakowania ich właścicieli – stają się cichymi pośrednikami, wykorzystywanymi do maskowania operacji szpiegowskich przeciwko instytucjom rządowym i sektorowi energetycznemu.

Boimy się chińskich routerów, ale i tak mamy je w domach. Nowe badania obnażają niewiedzę Europejczyków

Dla nas to jasny sygnał, że bezpieczeństwo sieci nie kończy się na silnym haśle do Wi-Fi. Przejmowanie domowych routerów przez wywiady Rosji czy Chin trwa od lat i przypomina niekończącą się grę w kotka i myszkę – rozbite przez służby botnety są natychmiast zastępowane nowymi. Jeśli nasz sprzęt zostanie zainfekowany, przestępcy zyskują tzw. domowy adres proxy (residential proxy). Z perspektywy systemów obronnych złośliwy ruch wygląda wtedy jak legalne, codzienne korzystanie z internetu przez zwykłego obywatela, co drastycznie utrudnia wykrycie ataku.

Dlaczego hakerzy szukają prywatnych adresów IP?

Większość zaawansowanych systemów bezpieczeństwa w bankach czy korporacjach automatycznie blokuje ruch sieciowy pochodzący z podejrzanych serwerów w chmurze lub znanych zagranicznych ośrodków. Hakerzy znaleźli jednak na to sposób. Jeśli uda im się włamać na router stojący w prywatnym mieszkaniu, przepuszczają swój atak przez to urządzenie, ukrywając się za tożsamością niewinnego użytkownika.

Za obecną falą ataków stoją grupy śledzone przez ekspertów m.in. jako Berserk Bear, Dragonfly czy Ghost Blizzard. Wykorzystują one zautomatyzowane botnety do bezustannego przeczesywania sieci. Szukają urządzeń, które posiadają włączone, przestarzałe protokoły lub fabryczne, niezmienione od nowości dane logowania. Gdy router odpowie na taki skan, staje się tzw. węzłem wyjściowym, z którego bezpośrednio uderza się w serwery administracji publicznej czy sektora finansowego.

Słaba konfiguracja protokołu SNMP otwiera drzwi do sieci

Jednym z głównych wektorów opisanych w najnowszym ostrzeżeniu CISA jest podatność w konfiguracji usługi SNMP (Simple Network Management Protocol). To powszechnie stosowane rozwiązanie, które służy do zdalnego zarządzania urządzeniami sieciowymi i zbierania o nich informacji.

Problem polega na tym, że miliony routerów na całym świecie mają fabrycznie włączone starsze wersje tego protokołu (SNMPv1 oraz SNMPv2). Ich kluczową wadą jest całkowity brak szyfrowania haseł dostępowych oraz przesyłanych instrukcji. Hakerzy posługujący się zautomatyzowanymi skanerami masowo trafiają na urządzenia z domyślnymi poświadczeniami, co pozwala im na modyfikację konfiguracji sprzętu i uruchamianie na nim złośliwego oprogramowania.

Jak sprawdzić i skutecznie zabezpieczyć swój domowy router?

Analiza mechanizmów wykorzystywanych przez grupy powiązane z FSB pokazuje, że większość infekcji wynika z prostych błędów konfiguracyjnych, których naprawienie zajmuje zaledwie kilka minut. Aby zminimalizować ryzyko włączenia naszego routera do globalnego botnetu, warto wdrożyć podstawowe zasady higieny cyfrowej:

• Wyłącz protokół SNMP: zaloguj się do panelu administracyjnego swojego routera i całkowicie wyłącz usługę SNMP, o ile nie używasz jej świadomie do zaawansowanego zarządzania siecią. Jeśli jest ona niezbędna, upewnij się, że korzystasz wyłącznie z bezpiecznej wersji SNMPv3, która wprowadza szyfrowanie.
• Zmień fabryczne dane logowania: domyślne hasła dostępu do panelu zarządzania typu „admin”, „1234” czy nazwa producenta to pierwsze, co sprawdzają automaty hakerów. Hasło administratora powinno być unikalne i silne.
• Zablokuj zdalne zarządzanie: upewnij się, że panel konfiguracyjny routera jest dostępny wyłącznie z poziomu sieci lokalnej (LAN), a funkcja zarządzania od strony internetu (WAN / Remote Management) jest wyłączona.
• Wyłącz zbędne usługi: raporty bezpieczeństwa zalecają również wyłączenie innych nieużywanych protokołów zarządzania, takich jak Cisco Smart Install, oraz regularne aktualizowanie oprogramowania układowego (firmware) routera.

Carders Seek 'Clean' Residential Proxies to Evade Fraud Controls

Criminals are on the hunt for so-called "clean" residential proxies, a new classification that's emerged in the underground world of payment fraud and carding. These proxies are prized for their spotless usage history, making them harder to detect and allowing scammers to evade fraud controls.

https://osintsights.com/carders-seek-clean-residential-proxies-to-evade-fraud-controls?utm_source=mastodon&utm_medium=social

#PaymentFraud #Carding #ResidentialProxies #EmergingThreats #UndergroundEconomy

🇸 Network expansion.

New residential IPs are now available in:

📍 Dallas, TX
📍 Los Angeles, CA

Available for:
• HTTP Proxy
• SOCKS5 Proxy
• Shadowsocks
• Trojan
• WireGuard VPN

Dedicated • Static

Starting at **$4/IP/month**.

More US locations, more options.

#ResidentialProxies #SOCKS5 #WireGuard #HTTPProxy

New, breaking: FBI Seizes NetNut Proxy Platform, Popa Botnet

"The Federal Bureau of Investigation (FBI) said today it worked with industry partners to seize hundreds of domains associated with NetNut, a sprawling residential proxy service operated by the publicly-traded Israeli company Alarum Technologies [NASDAQ: ALAR]. The action comes roughly two weeks after KrebsOnSecurity published findings from multiple security firms connecting NetNut to the Popa botnet, a collection of at least two million devices that have been compromised by malicious software with little or no consent from victims."

https://krebsonsecurity.com/2026/07/fbi-seizes-netnut-proxy-platform-popa-botnet/

#popa #botnet #cybercrime #residentialproxies #netnut

US IP Addresses Fuel Proxy Services for Cybercrime

Millions of unsuspecting US households are unwittingly fueling cybercrime, with an estimated 20 million connections being repurposed as proxies, often without their knowledge. This shocking trend highlights the dark side of residential IP addresses being exploited for malicious activities.

https://osintsights.com/us-ip-addresses-fuel-proxy-services-for-cybercrime?utm_source=mastodon&utm_medium=social

#ResidentialProxies #Cybercrime #ProxyServices #UsIpAddresses #EmergingThreats

‘Popa’ Botnet Linked to Publicly-Traded Israeli Firm

https://krebsonsecurity.com/2026/06/popa-botnet-linked-to-publicly-traded-israeli-firm/

#ConfederationofOpenAccessRepositories #DirectoryofOpenAccessJournals #AlarumTechnologiesLtd #residentialproxies #LumenTechnologies #BrendanO'Connell #ALittleSunshine #IncludeSecurity #LatestWarnings #TheComingStorm #BlackLotusLabs #NokiaDeepfield #DavidBrunsdon #ChrisFormosa #NickSundvall #OceanStreams #RapidStreamz #JérômeMeyer #SeanSimmons #Popabotnet

Mirax Trojan Hijacks Android Devices for Proxy Network

Meet Mirax, a sneaky new Android banking trojan that's not only stealing credentials, but also hijacking devices to create a powerful proxy network - putting European users at risk. This emerging malware is a triple threat, combining a malware-as-a-service model, remote access capabilities, and residential proxies to wreak havoc…

https://osintsights.com/mirax-trojan-hijacks-android-devices-for-proxy-network?utm_source=mastodon&utm_medium=social

#AndroidBankingTrojan #EmergingThreats #Malwareasaservice #ResidentialProxies #Maas

Residential proxies make a mockery of IP-based defenses - Help Net Security https://www.helpnetsecurity.com/2026/04/06/residential-proxy-attack-traffic-ip-reputation-enterprise-security/

#CyberSecurity #InfoSec #ResidentialProxies #ITSecurity #NetworkSecurity #TechNews

Riley Kilmer warns:
“Residential IP traffic can’t be treated as low-risk anymore because it’s now commonly used by automated systems and fraud operations.”
“What security teams see today is that residential traffic provides cover.”

Full interview:
https://www.technadu.com/automation-is-hiding-in-plain-sight-and-residential-traffic-is-the-cover/620533/

#WomenInCyber #ResidentialProxies #FraudDefense #CyberSecurity

With a +320% ⬆️, 🇨🇳 telecom provider China Mobile (chinamobile[.]com) has climbed to #8 in the Top 10 networks hosting IPs linked to exploited devices, with 55,833 detections in the past 30 days.

Reputation Statistics | Networks ⤵️⤵️
https://www.spamhaus.org/reputation-statistics/networks/exploit/

Additionally, this network has 12 Spamhaus Blocklist (SBL) listings:
👉 https://check.spamhaus.org/sbl/listings/chinamobile.com/

#Malware #ResidentialProxies #ThreatIntel

From the depths of the Internet:

"In January 2023, Bright Data was sued by Meta Platforms for harvesting and selling data scraped from Facebook and Instagram. Meta previously hired Bright Data to scrape data from other websites."

• Wikipedia: Bright Data

#brightdata #meta #facebook #ai #llm #proxy #residentialproxies

Your IP is clean… until suddenly it isn’t. You've unknowingly been pulled into a residential proxy network. 😱 These networks continue to pull in unsuspecting IPs, and the repercussions can be messy - degraded reputation, service disruption, and the risk of landing on a blocklist.

If you’ve just discovered your IP was listed because of residential proxy abuse, you’re not alone. To help, we’ve put together a simple FAQ explaining what happened and how to fix it.

First, let's start with how this happened:
➡️ https://www.spamhaus.org/faqs/residential-proxies/#residential-proxy-recommendations

Then follow the steps to fix it:
➡️ https://www.spamhaus.org/faqs/residential-proxies/#what-steps-can-i-take-to-fix-the-issue

#ResidentialProxies #Support #TicketDesk

Start by reading our FAQ to understand why your IP was listed:
➡️ https://www.spamhaus.org/faqs/residential-proxies/#residential-proxy-recommendations

Once you’ve got the basics, follow these steps to resolve the issue:
➡️ https://www.spamhaus.org/faqs/residential-proxies/#what-steps-can-i-take-to-fix-the-issue

#ResidentialProxies #Support #TicketDesk

⚠️ Do you download or use free apps?

What if we told you that some free apps install proxies on devices so cybercriminals can use them as part of a "residential proxy network" to spread spam and malicious email? 😱

Not what you signed up for, right?

It can create a nightmare for unsuspecting victims, as one man experienced when his doorbell (yes you read that right!) got him listed on a Spamhaus blocklist!

Read this true story here👇
https://www.spamhaus.com/resource-center/when-doorbells-go-rogue/

#FreeApps #ResidentialProxies

NetNut’s residential proxies offer marketers speed, geo-targeting, security, and block-free automation for campaigns. https://hackernoon.com/why-digital-marketers-prefer-netnut-residential-proxies-over-standard-or-datacenter-alternatives #residentialproxies

Cybercriminals Are Hiding Malicious Web Traffic in Plain Sight
https://www.wired.com/story/cybercriminals-are-hiding-malicious-web-traffic-in-plain-sight/
#cybersecurity #residentialproxies #malware #cybercrime #hidinginplainsight #yourcomputerismycomputer

This month Spamhaus' CSS Blocklist reached 8 million active IPs listed for low-reputation email activity! 🎉 Spam activity appears to be shifting toward residential proxies, making up a significant portion of the increase, as emission IPs are constantly changing, with around 500k new IPs added to our lists each day. 📈

Email admins! Use this real-time DNSBL to reduce inbound spam and other malicious email traffic. For optimum filtering, apply at:

➡️ Initial connection – against the connecting IP
➡️ Once email data accepted – check IPs in received chain mail headers and IPs hosting resources in the body (e.g. URLs)

Learn more about this data set here ⤵️
https://www.spamhaus.org/blocklists/combined-spam-sources/

#Spam #ResidentialProxies #EmailFiltering

Starting around 2:00 AM UTC on March 4th, we've been observing a vast botnet operation attempting to use SMTP-AUTH credentials from nearly 500K distinct IPs - to perform what looks like a large scale phishing campaign targeting Brazilian users.

Here's what we know:

1️⃣ Subject lines used include:

Evite a Suspensão da Sua Caixa de Entrada
Saiba Como-XXXXXX
Sua Capacidade de E-mail Está no Máximo
Solução Disponível-XXXXXX
Atualize Sua Conta para Continuar Recebendo Novas Mensagens

2️⃣ Phishing payload is located at: hXXps://acessoclientevalidar.dnsalias[.]com/

3️⃣ Of particular interest is the fact that the IPs involved in this campaign are overwhelmingly located in Brazil too.

4️⃣ Based on what we and others know about the systems performing this phishing campaign, there appears to be a strict correlation with IPs associated with residential proxy networks.

5️⃣ Out of 373K Brazilian IPs involved, over 90% are associated with residential proxy networks.

#Phishing #Botnet #ResidentialProxies #ThreatIntel #CyberSecurity

When a resident’s device in a long-term care home triggers a residential proxy infection on the corporate network 👾 - what a nightmare! Third-party proxies roaming inside a care home? It gives you the chills. 😨

Thankfully, the issue was resolved! And with some lovely feedback for our TicketDesk team. The kind words mean a great deal, thank you! 💛

#TicketDeskTales #CareHomeChaos #ResidentialProxies

Treasury Sanctions Creators of 911 S5 Proxy Botnet

https://krebsonsecurity.com/2024/05/treasury-sanctions-creators-of-911-s5-proxy-botnet/

#BizPattayaGroupCompanyLimited #U.S.DepartmentoftheTreasury #LilySuitesCompanyLimited #residentialproxies #JingpingLiu #RileyKilmer #PaladinVPN #YanniZheng #YunheWang #MaskVPN #spur.us #DewVPN #Other #911S5 #911s5 #proxy

Treasury Sanctions Creators of 911 S5 Proxy Botnet https://krebsonsecurity.com/2024/05/treasury-sanctions-creators-of-911-s5-proxy-botnet/ #BizPattayaGroupCompanyLimited #U.S.DepartmentoftheTreasury #LilySuitesCompanyLimited #residentialproxies #JingpingLiu #RileyKilmer #PaladinVPN #YanniZheng #YunheWang #MaskVPN #spur.us #DewVPN #Other #911S5 #911s5 #proxy

📈 Researchers at Spamhaus have recently observed a record high of 700k residential proxies abused for sending spam. This alarming trend highlights the growing concern surrounding spam activities from these networks.

To learn more about the dangers of residential proxy networks, check out this article 🔽
https://www.spamhaus.com/resource-center/lets-talk-about-the-danger-of-residential-proxy-networks/

#ResidentialProxies #ProxyNetworks #Spam

911 Proxy Service Implodes After Disclosing Breach https://krebsonsecurity.com/2022/07/911-proxy-service-implodes-after-disclosing-breach/ #residentialproxies #ALittleSunshine #DataBreaches #WebFraud2.0 #RileyKilmer #LuxSocks #spur.us #VIP72 #911