Archive — US — techcrunch
FBI and Dutch police seize and shut down botnet of hacked routers
A joint operation by the FBI and Dutch police dismantled a botnet known as Anyproxy and 5Socks, which exploited hacked routers for criminal purposes. U.S. prosecutors indicted four individuals for profiting from these services, which falsely marketed as residential proxy networks while controlling compromised devices. The operation reflects a significant setback for cybercrime operations leveraging vulnerable internet-connected devices.
Key points
- The FBI and Dutch police executed 'Operation Moonlander', targeting services Anyproxy and 5Socks for using hacked routers as a botnet.
- Four suspects were indicted: Alexey Chertkov, Kirill Morozov, Alexandr Shishkin (Russians), and Dmitriy Rubtsov (Kazakhstan).
- The indicted individuals allegedly targeted weaker, older router models known for vulnerabilities, compromising thousands of devices.
- The botnet made over $46 million from selling proxy services that masqueraded as legitimate traffic sources but conducted illicit activities such as fraud and DDoS attacks.
- Activists and cybersecurity firms like Black Lotus Labs assisted in tracking these networks, helping law enforcement identify the operations.
Why it matters
- This incident highlights increasing concerns over Internet of Things (IoT) security as more devices connect online, creating vulnerabilities.
- The ongoing trend of cybercriminals leveraging existing infrastructure for illicit purposes aligns with the rise in remote work and online activity due to the pandemic.
- The event underscores the evolution of cybercrime tactics, especially concerning disguised operations using legitimate-looking services.
The successful dismantling of Anyproxy and 5Socks serves as a crucial victory against cybercrime, shedding light on the vulnerabilities of IoT devices and the need for enhanced security measures to protect against similar threats in the future.