Cybercriminals Are Hiding Malicious Web Traffic in Plain Sight

Gray for years Market services known as Bulletproof, anonymously, there was a key tool for cyber criminals who did not want to announce website infrastructure. But as global law enforcement agencies Crack in digital threatsThese were prepared strategies to obtain customer information from these homeowners and went on to the remaining people behind the services. The researcher Thibakult Seret said in a cybercrime-focused conference in Arlıkton today, the researcher thibrault Seret said that this turn was aimed at a bulletist hosting company and an alternative to criminal customers.

Some service providers have been installed to find ways of reaching the way to reach legal protection, rather than trusting web hosts Vpns And other proxy services, client scrolling IP addresses and offers a masking and masking or intentional traffic or traffic mixing or infrastructure from many sources. Technology not new, Seretry and other researchers have stressed the transition to the use of proxies between cybercrinals in the last few years.

“The point is that in a node, which traffic is bad and what traffic is bad and that the traffic is good,” Seret, Team team’s team in Cymru said. “This is the magic of a proxy service – you can’t say who is. The Internet is good in terms of freedom, but it is super, super hard to analyze what happened.”

The main problem of resolving the secret cyberscrightist by Proxies is that the services are able to help them in the first place, primarily. Criminals and companies that do not want to lose them as customers are especially known to the known ones “Residence Cases” or a number of centralized nodes that can provide low, rotating IP addresses on consumer devices, even in older Android phones or low end laptops, home and offices. Such services offer anonymity and confidentiality, but harmful traffic can also remain.

By doing harmful traffic, income from reliable consumer IP addresses, aggressors, the suspicious activity is more difficult for the scanners and other danger detection of organizations. And other centralized platforms working on consumer consumer hardware, reduce the ideas and control of a service provider, make it more difficult to achieve the law enforcement agencies beneficial.

“The attackers Ramport the use of residential networks for the attacks over the past two or three years,” said Ronnie Tokazowski, for a long time researcher and copy scout for long-time non-profit intelligence. “If the attackers come from the same settlement, the employees of a target organization are difficult to watch.”

It is not new to use the crime of proxians. In 2016, for example, the US Department of Justice said that one of the notorious research “Avalanche” cybercriminal platform was the use of service The “fast stream” hosting method that hides using the harmful activity of the platform constantly changing Proxy IP addresses. But the increase in the attackers is not a growing change, not a gray market service.

“I don’t know how we can still develop a proxy issue,” he said. “I think law enforcement agencies will be able to target the providers of a harmful lawyer, such as bulleting houses. But in general, the authorities are all internet services used by everyone.