PaperPhone Headless Browser Network Uses 75,000 IPs and Fabricated Mobile Identities Across 43 Countries
CrowdSec says the PaperPhone headless-browser network scraped the web from 75,000 IPs across 43 countries.
CrowdSec’s September 29 report describes PaperPhone, a headless-browser network seen over two weeks using about 75,000 IP addresses in 230 blocks across 43 countries for large-scale web scraping. Traffic peaks from distant countries rose together, and many ranges were known data-center space rather than residential proxies; more than 20% transited via M247. Bots cycled 13 claimed Android and iOS identities but all reported a 375×812 viewport and exposed Google SwiftShader, consistent with unaccelerated Chrome automation. CrowdSec did not identify compromised servers, specific victims, stolen data, or financial losses.
64