The Link Between AWM Proxy & the Glupteba Botnet
Summary: Google sued two Russian men on December 7, 2021 over the Glupteba botnet, and the same day the AWM Proxy anonymity service went offline; new research ties AWM Proxy's founder to one of the defendants. KrebsOnSecurity traced a 2008 Google Analytics code and WHOIS records to Dmitry Sergeevich Starovikov, whom Google names as a Glupteba operator, while AWM Proxy has since rebranded and reports its malware running on roughly 175,000 systems in the last 24 hours, about 65,000 of them online.
What you should know: AWM Proxy was renting access to about 24,000 infected PCs in 2011 and ten times that a decade later, and Glupteba grew to more than one million infected devices worldwide, so the takedown of one storefront did not remove the pay-per-install supply behind it.
Read the original at Krebs on Security ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026