Bilingual

Residential Proxies Are a National Security Threat
2 days ago
- Residential proxies route traffic through real home internet connections, making abuse appear as legitimate user activity.
- They are created unknowingly through free VPN apps, proxy SDKs in games, or malware on devices.
- Blocking residential proxies is difficult because it would also cut off genuine users from the same IP ranges.
- The threat intelligence industry profits from tracking these IPs but has perverse incentives to not eliminate the problem.
- Residential proxy networks pose national security risks including data loss, malware surveillance, influence campaigns, and botnets.
- ISPs should detect suspicious activity and warn customers to clean their devices and remove proxy software.
An Update on the scraper situation
19 days ago
- Scraper attacks from AI bot networks using residential proxies are overwhelming websites, creating excessive traffic by using millions of compromised devices, often without the owner's knowledge.
- Companies like Bright Data and others offer 'ethical' residential-proxy networks, exploiting free VPNs or SDKs to turn users' devices into endpoints for scraping.
- The scraping is believed to be fueled by a growing demand for training data for AI models, driven by various entities including corporations and government agencies.
- Websites are implementing defensive measures such as proof-of-work systems like Anubis, captchas, paywalls, and login gates to mitigate scraper impacts.
- LWN has adopted site optimizations and selective access controls to protect its site while minimizing disruption to legitimate users and search engines.
- Recent takedowns of networks like IPIDEA and NetNut have temporarily reduced attacks, but the problem persists, indicating the need for more lasting solutions.
- There is concern that the ongoing scraping threatens the open internet and may push more content behind restrictive barriers, compromising its creative potential.
FBI Seizes NetNut Proxy Platform, Popa Botnet
a month ago
- FBI seized hundreds of domains linked to NetNut, an Israeli residential proxy service tied to the Popa botnet.
- NetNut used compromised home devices like smart TVs to create proxy nodes for cybercrime, including ad fraud and account takeovers.
- Google disabled NetNut-related accounts and apps, noting widespread use by threat actors to mask malicious traffic.
- NetNut's parent company Alarum Technologies is cooperating with law enforcement following the domain seizures.
- Security experts say the takedown disrupts major proxy networks, impacting cybercrime and reducing DDoS botnet resources.
- Consumers are advised to use reputable TV brands and avoid unofficial Android systems to prevent proxy enrollment.
- Proxy tracking services and apps for smart TVs often include SDKs that turn devices into proxy nodes without user consent.
- Efforts are ongoing to seize additional domains, with some NetNut infrastructure still active or under legal scrutiny.

residential proxies

Residential Proxies Are a National Security Threat

An Update on the scraper situation

FBI Seizes NetNut Proxy Platform, Popa Botnet