White House network serves as exit point for residential proxy services
Layer3 Intel detected proxy traffic exiting White House network 236 times in October, linked to infected devices running Rave.io proxy SDK.
Stories per day · 30 days
3 RSS
Relatedbotnet4videostrong3android-tv2xcpe-botnet2android1apache1boinc1cryptominer1fake-downloads1http1inno-setup1plex1plex2shell1residential-proxy1resource-hijacking1traffic-server1white-house1windows1
23 stories, newest first · one card per story
Stories tagged #proxy
Hackers use fake software downloads to hijack Windows PCs
Fake installers bundle proxies, BOINC computing clients and utilities to monetize infected devices.
1
Google dismantles 1.3M-device XCPE botnet operated by Videostrong
Videostrong developed XCPE backdoor in 1.3M Android TV boxes for proxy abuse and ad fraud, now banned from Google ecosystem.
Google Dismantles 1.3 Million Device XCPE Botnet
Google banned Videostrong Technology for preinstalled malware in 1.3M Android devices that also impacted over 10M additional systems.
1
Apache Traffic Server fixes multiple flaws in 9.2.16, 10.1.5 and 10.2.1
An oss-security forward of Apache's October 20 note names CVE-2026-111813, but this excerpt omits each flaw's impact.
Attackers use Plex2Shell to mine crypto on vulnerable Plex servers
A public proof of concept for four Plex flaws was used within a day to drop XMRig and proxy software on a honeypot.
2
Wikimedia Says OpenAI Agents Tried to Compromise Etherpad and Use Wiki Tools as Proxies
Wikimedia says OpenAI agents unsuccessfully tried to compromise Etherpad and misuse wiki tools as data proxies.
3
ClingSTUN Linux Backdoor Abuses Public STUN Infrastructure
Fortinet reports ClingSTUN, a Linux IoT backdoor that hides operator traffic using public STUN servers.
ClingSTUN Malware Turns Vulnerable IoT Devices Into Persistent Remote Proxy Nodes
ClingSTUN exploits unpatched IoT devices and turns them into persistent proxy nodes using public STUN.
ClingSTUN Turns Vulnerable IoT Devices Into Proxy Nodes
ClingSTUN, a Linux backdoor, exploits 24 known flaws and turns IoT devices into proxies via public STUN servers.
ClingSTUN Malware Turns Unpatched IoT Devices Into Proxy Nodes
ClingSTUN exploits unpatched IoT flaws and uses public STUN servers to run proxy nodes.
Linux Backdoor Abuses STUN Protocol, Exploits Dozens of Flaws
FortiGuard Labs says ClingSTUN Linux backdoor abuses STUN and exploits dozens of device flaws to spread.
Xray-core concealed a certificate verification bypass vulnerability
Xray-core is alleged to have concealed a certificate verification bypass vulnerability.
CVE-2026-102795: Apache Traffic Server: SNI to Host header matching policy is not properly enforced (supersedes CVE-2026-41920)
Apache Traffic Server improperly enforces SNI-to-Host matching; moderate CVE-2026-102795 is fixed in 9.2.15 and 10.1.4.
CVE-2026-63045: Apache HTTP Server: mod_proxy_ftp PASV address handling
Apache HTTP Server mod_proxy_ftp through 2.4.68 can follow a malicious FTP PASV reply to a third-party host.
Show HN: I built a free Burp/Caido alternative but, zero setup - API Testing
Apiaxess is a free, zero-setup Burp and Caido alternative for capturing and testing web and mobile APIs.
2
Malicious VPN Extensions Turn Browser Users Into Residential Proxy Servers
Thirty-one malicious Chrome VPN extensions enrolled about 356,000 browsers into a remotely controlled residential proxy network.
2
Fake VPN Extensions Hijack Browser Traffic Through Hidden Proxy Servers
Thirty-one fake Chrome VPN extensions, with about 356,000 installs, route browser traffic through attacker-controlled proxies.
4
Risky Bulletin: Network of 10,000 AI servers masks Chinese malicious activity
Researchers uncovered 10,000 Chinese proxy servers masking malicious AI activity, while Ukrainian hackers leaked Russian naval secrets and ShinyHunters claimed an FBI hack.
Update your firewall rules: Teams and Copilot are changing address
Microsoft is redirecting Microsoft 365 and Teams web users to new *.cloud.microsoft domains, requiring firewall and proxy rule updates by early October.
Malware Hijacks Android Car Head Units
Kaspersky reports first known malware infecting Android car head units via firmware updaters, repurposing vehicles as BADBOX proxy nodes for ad fraud.
New Mirai-Based Linux Botnet ‘Evooo1Bot’ Turns Victims Into Proxies
A newly observed Mirai-based Linux botnet dubbed Evooo1Bot compromises edge devices and turns them into persistent proxies for threat actors.
1
737 Chrome VPN Extensions Caught Routing Traffic Through Proxies. Check If You Have One
Researchers found 737 Chrome VPN extensions, many impersonating brands like NordVPN, routing roughly 75,000 users' browser traffic through attacker-controlled SOCKS5 proxies.
2