15-Year-Old Malware Proxy Network VIP72 Goes Dark
Summary: VIP72, a cybercrime anonymity service that routed customers' traffic through malware-infected systems for 15 years, saw its storefront vanish roughly two weeks before September 2021. The domain Vip72[.]org was registered in 2006 to a Russian-speaking hacker known as "Corpse," who had earlier created the Haxdoor banking trojan, and the service normally had several hundred thousand compromised systems available for rent until that number dwindled to fewer than 25,000 globally by the time the site disappeared.
What's compelling: The infected machines behind VIP72 remain infected and reportedly still forward traffic even with the storefront gone, so the criminal infrastructure outlived the brand that sold it.
Read the original at Krebs on Security ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026