Rent-a-Bot Networks Tied to TDSS Botnet
Summary: The TDSS botnet, first launched in 2008 and now in its fourth major version (TDL-4), rents access to its infected PCs through a storefront at awmproxy.net, which advertises more than 24,000 proxies for rent and accepts PayPal, MasterCard, and Visa. Kaspersky researchers reported that a socks.dll module installed on infected machines notifies awmproxy.net when a new proxy is available, after which the PC begins accepting roughly 10 proxy requests per minute, with pricing from $3 per day to $500 a month and $160 a week for exclusive access to 100 infected systems.
Key Takeaway: A botnet this public is selling access to 24,000 compromised machines at $3 a day, which means the proxy your traffic exits through could be an infected home PC whose owner has no idea it is for rent.
Read the original at Krebs on Security ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026