⚡ Weekly Recap: Proxy Botnet, Office Zero-Day, MongoDB Ransoms, AI Hijacks & New Threats

Summary: Google disrupted the IPIDEA residential proxy network, seizing or sinkholing command-and-control domains and reducing its available device pool by millions. The network turned enrolled devices into proxy exit nodes, sold access to customers, and has been linked to large-scale brute-forcing of VPN and SSH services since early 2024.
What's compelling: Residential proxy networks like IPIDEA let attackers hide malicious traffic behind ordinary consumer IP addresses in the U.S., Canada, and Europe, so the source of an attack looks like a home user rather than an adversary.

Read the original at The Hacker News ↗