Infrawatch

Detect early. Multi-source infrastructure intelligence, delivered in real time, detections, context, and signals you can act on.

[Infrawatch @infrawatch_app]

Foreign-controlled proxy network "DSLRoot" has deployed hardware in 300+ U.S. homes across 20+ states-including military residences.

Full investigation now live: https://t.co/WbpiTsittX

[Lloyd Davies @LloydLabs]

A single platform powers 87 SIM farm proxy networks across 17 countries, this was fun looking into it! Definitely worth the read.

[Infrawatch @infrawatch_app]

This is now live here: https://t.co/Nfj2c6I0Du

[Infrawatch @infrawatch_app]

Infrawatch identified 87 SIM farms across 17 countries, 24 commercial proxy providers, 35 cellular providers, 94 phone-farm locations across North America, Europe & South America, including a distributed presence across 19 U.S. states.

Report coming tomorrow.. 👀🚜📱

[Infrawatch @infrawatch_app]

👀 NEW FROM US: Infrawatch identified 87 SIM farms across 17 countries.

SIM farms are now for sale, to anyone. We’ve uncovered a service that enables anyone, regardless of technical skill, to operate their own SIM farm.

https://t.co/Nfj2c6I0Du

[Infrawatch @infrawatch_app]

Following today’s NCSC + U.S. DOJ disclosures on APT28 DNS hijacking activity, Infrawatch identified at least 18.6K likely victims across 87 countries.

We’ve published a victimology dashboard with victim breakdowns and a public IP checker:

https://t.co/YTKaMKqKxN

[Infrawatch @infrawatch_app]

The foundations are being laid. 2026 is when it gets real. 🚀

[Infrawatch @infrawatch_app]

@HansBricks3 @vxunderground Thank you Hans, sorry to hear that, could you email us please instead? [email protected]

[Infrawatch @infrawatch_app]

@virusbtn Thank you for the mention!

[Virus Bulletin @virusbtn]

Infrawatch researchers look into DSLRoot, a distributed residential proxy network across U.S. infrastructure, using hardware deployed in at least 20 states. https://t.co/dFC6FQV9Su

[Infrawatch @infrawatch_app]

@gleeda Hey Jamie, thank you for bringing this to our attention. What browser is this?

[Infrawatch @infrawatch_app]

Foreign-controlled proxy network "DSLRoot" has deployed hardware in 300+ U.S. homes across 20+ states-including military residences.

Full investigation now live: https://t.co/WbpiTsittX

[Infrawatch @infrawatch_app]

Also see Brian's post here: https://t.co/qljAPY59WJ. This was a great collaboration which led us down new paths to investigate! 🤖

[Infrawatch @infrawatch_app]

New research Tuesday: How is a Belarus company convincing US military personnel to install network devices in their homes?

Our investigation into DSLRoot reveals Americans are unknowingly helping foreign actors build proxy infrastructure on US soil.

[Infrawatch @infrawatch_app]

A sneak peek at our dashboard 👀

Hunt threats across VPN, malware, residential proxy and internet-scanning data in real-time. Get instant context across the entire internet.

🥇 Be among the first - BETA access still accepting applications: https://t.co/cfLtGS7Eca

[Virus Bulletin @virusbtn]

Infrawatch researchers explore GhostSocks, a Golang-based SOCKS5 backconnect proxy malware, detailing its integration with LummaC2 and its command-and-control infrastructure. https://t.co/DoZUtb8d02

[Infrawatch @infrawatch_app]

GhostSocks: A SOCKS5 backconnect malware enhancing LummaC2 infections.

Our latest analysis covers its technical details, infrastructure, and how it improves credential fraud success.

Learn more about about GhostSocks here 👉🏻

https://t.co/OPN58phCy8

[Infrawatch @infrawatch_app]

No more waiting on predefined scans from third-party tools.

Customise probes, target specific IPv4/IPv6 ranges, ASNs, countries, or the entire 🌎 - and act immediately.

Probe deeper into the internet.

👉🏻 https://t.co/EHtZjgSRXq