Dutch authorities have dismantled a massive botnet comprising 17 million infected devices, including smartphones and IoT hardware, that were being utilized by cybercriminals to facilitate malicious network traffic.

Key Points

• Dutch police and the National Cyber Security Center seized over 200 servers used to host the botnet's backend infrastructure.
• Reports identify the service as Asocks, a proxy provider previously linked to the PROXYLIB campaign by Satori Threat Intelligence.
• The botnet enslaved millions of computers, tablets, and mobile devices by installing malware to enable remote control for criminal operations.
• Asocks marketed residential and mobile proxy subscriptions ranging from $5 to $15 per month to users worldwide.
• Officials recommend securing devices by updating operating systems, using strong passwords, and enabling two-factor authentication to prevent unauthorized access.

Why it Matters

This operation highlights the growing risk of proxyware services that exploit compromised consumer devices to mask malicious cyber activity. By disrupting this infrastructure, authorities aim to curb the availability of residential IP addresses used by bad actors to bypass security filters and conduct large-scale attacks.