Infrawatch
@infrawatch_app
Followers
600
Following
44
Media
1
Statuses
8
YARA-first adversary infrastructure discovery at internet scale. Uncover residential proxies, VPNs, malware C2s, and more with 500+ baked-in rules.
United Kingdom
Joined December 2023
Foreign-controlled proxy network "DSLRoot" has deployed hardware in 300+ U.S. homes across 20+ states-including military residences. Full investigation now live:
infrawatch.app
Detailed analysis of DSLRoot, a residential proxy network deploying hardware across U.S. homes, operated by a Belarusian national. Includes technical overview, network footprint, and operator...
3
35
127
Also see Brian's post here: This was a great collaboration which led us down new paths to investigate! 🤖.
krebsonsecurity.com
The cybersecurity community on Reddit responded in disbelief this month when a self-described Air National Guard member with top secret security clearance began questioning the arrangement they'd...
0
5
18
Generate videos in just a few seconds. Try Grok Imagine, free for a limited time.
491
862
4K
New research Tuesday: How is a Belarus company convincing US military personnel to install network devices in their homes?. Our investigation into DSLRoot reveals Americans are unknowingly helping foreign actors build proxy infrastructure on US soil.
2
73
512
A sneak peek at our dashboard 👀 . Hunt threats across VPN, malware, residential proxy and internet-scanning data in real-time. Get instant context across the entire internet. 🥇 Be among the first - BETA access still accepting applications:
0
3
9
RT @virusbtn: Infrawatch researchers explore GhostSocks, a Golang-based SOCKS5 backconnect proxy malware, detailing its integration with Lu….
0
14
0
GhostSocks: A SOCKS5 backconnect malware enhancing LummaC2 infections. Our latest analysis covers its technical details, infrastructure, and how it improves credential fraud success. Learn more about about GhostSocks here 👉🏻.
infrawatch.app
This analysis explores GhostSocks, a Golang-based SOCKS5 proxy malware, detailing its integration with LummaC2 and its command-and-control infrastructure. We highlight its use of obfuscation and...
1
4
17
No more waiting on predefined scans from third-party tools. Customise probes, target specific IPv4/IPv6 ranges, ASNs, countries, or the entire 🌎 - and act immediately. Probe deeper into the internet. 👉🏻
infrawatch.app
The lack of flexibility in traditional scanning products leaves organizations reliant on publicly available datasets, often waiting for others to decide what gets scanned and when.
0
6
16