Breach Exposes Users of Microleaves Proxy Service
Summary: Microleaves, a proxy service launched in 2013 and now rebranding to Shifter.io, fixed a website vulnerability that exposed its entire user database, including customer payment records showing more than $11.7 million in direct payments. The exposed data and the founder's forum history link the service to pay-per-install schemes, an exploit kit that generated 3,000 to 5,000 new bots daily, and software that Kaspersky flags as a trojan posing as Microsoft Windows Update.
Key Takeaway: The service claims 20-30 million IPs, and Spur tracks roughly a quarter-million Microleaves/Shifter proxies each day, meaning traffic your organization sees from a residential IP may be coming from a machine its owner never agreed to lease.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026