A Deep Dive Into the Residential Proxy Service ‘911’
Summary: A University of Sherbrooke analysis found roughly 120,000 PCs for rent through the residential proxy service 911, which has sold access to Windows machines for seven years and builds its network partly through free VPN software that turns users' computers into traffic relays. Researchers traced 911's domains to WHOIS records naming Yunhe Wang of Beijing and an ustraffic@qq.com address tied to pay-per-install affiliate programs, and found nodes inside US universities, water utilities, defense contractors, law enforcement and government networks.
Bottom line: The researchers reported that infecting a node lets a 911 user reach shared resources on that network, probe its LAN, and potentially poison the DNS cache of the internal router - so a single employee installing a free VPN can hand an anonymous renter a foothold inside a critical infrastructure network.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026