Back to Feed
MalwareMar 12, 2026

US disrupts SocksEscort proxy network powered by Linux malware

US and European law enforcement disrupted the SocksEscort cybercrime proxy network, which exclusively used Linux edge devices compromised by the AVRecon malware. The operation represents a coordinated effort between government agencies and private partners to dismantle infrastructure used for illegal proxy services.

Summary

US and European law enforcement disrupted the SocksEscort cybercrime proxy network, which exclusively used Linux edge devices compromised by the AVRecon malware. The operation represents a coordinated effort between government agencies and private partners to dismantle infrastructure used for illegal proxy services.

Indicators of Compromise

  • malware — AVRecon
  • malware — SocksEscort