Security News > 2024 > November > Ngioweb Botnet Fuels NSOCKS Residential Proxy Network Exploiting IoT Devices

2024-11-19 14:01
The malware known as Ngioweb has been used to fuel a notorious residential proxy service called NSOCKS, as well as by other services such as VN5Socks and Shopsocks5, new findings from Lumen Technologies reveal. "At least 80% of NSOCKS bots in our telemetry originate from the Ngioweb botnet, mainly utilizing small office/home office (SOHO) routers and IoT devices," the Black Lotus Labs team at
News URL
https://thehackernews.com/2024/11/ngioweb-botnet-fuels-nsocks-residential.html
Related news
- BREAKING: 7,000-Device Proxy Botnet Using IoT, EoL Systems Dismantled in U.S. - Dutch Operation (source)
- Hackers Exploit Samsung MagicINFO, GeoVision IoT Flaws to Deploy Mirai Botnet (source)
- Feds disrupt proxy-for-hire botnet, indict four alleged net miscreants (source)
- ⚡ Weekly Recap: Zero-Day Exploits, Developer Malware, IoT Botnets, and AI-Powered Scams (source)
- Law enforcement takes down proxy botnets used by criminals (source)
- New PumaBot Botnet Targets Linux IoT Devices to Steal SSH Credentials and Mine Crypto (source)