No more waiting on predefined scans from third-party tools. Customise probes, target specific IPv4/IPv6 ranges, ASNs, countries, or the entire 🌎 - and act immediately. Probe deeper into the internet. 👉🏻 infrawatch.app/blog/introduci…

GhostSocks: A SOCKS5 backconnect malware enhancing LummaC2 infections. Our latest analysis covers its technical details, infrastructure, and how it improves credential fraud success. Learn more about about GhostSocks here 👉🏻 infrawatch.app/blog/ghostsock…

Infrawatch researchers explore GhostSocks, a Golang-based SOCKS5 backconnect proxy malware, detailing its integration with LummaC2 and its command-and-control infrastructure. infrawatch.app/blog/ghostsock…

A sneak peek at our dashboard 👀 Hunt threats across VPN, malware, residential proxy and internet-scanning data in real-time. Get instant context across the entire internet. 🥇 Be among the first - BETA access still accepting applications: infrawatch.app/beta-access

Infrawatch now monitors 12 unique 🇨🇳 Operational Relay Box (ORB) networks in real-time. Our standard discovery automatically maps impacted devices across all tags—giving you real actionable intelligence to block or mitigate these networks as they appear.

New research Tuesday: How is a Belarus company convincing US military personnel to install network devices in their homes? Our investigation into DSLRoot reveals Americans are unknowingly helping foreign actors build proxy infrastructure on US soil.