Cyber Risks · Krebs on Security

Meet the Administrators of the RSOCKS Proxy Botnet

Summary: Authorities in the United States, Germany, the Netherlands and the U.K. said they dismantled the RSOCKS botnet, a collection of millions of hacked devices sold as proxies to cybercriminals, with access ranging from $30 per day for 2,000 proxies to $200 per day for 90,000. KrebsOnSecurity identified the botnet's owner as a 35-year-old Russian man living abroad, Denis Kloster, who also runs the RUSdot spam forum and whose RSOCKS operation had been advertised since 2014.

Why it matters: The RSOCKS owner posted on BlackHatWorld that 'RSocks ceases to exist' but that all active plans and fund balances would transfer to another service under a new name, so the takedown may not be permanent. The operation ran for roughly eight years before authorities acted, and its owner's anonymity business reportedly grew to nearly two dozen employees.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related