"Rising Threat: TheMoon Malware Exploits Thousands of Devices for Proxy Service"

TL;DR Summary
Criminals are using thousands of home and office routers to anonymize illicit online activities through a variant of TheMoon malware, enrolling infected devices into a proxy service called Faceless. Additionally, 28 Android apps available in Google Play were found to unknowingly enroll users' devices into a residential proxy network for anonymizing and obfuscating Internet traffic. Users are advised to take precautions such as discontinuing the use of unsupported devices, installing security updates promptly, and researching the reputation of apps and app makers before installation to prevent their devices from being used in such networks.
- Thousands of phones and routers swept into proxy service, unbeknownst to users Ars Technica
- Lumen Technologies detects new botnet targeting routers, smart devices Axios
- TheMoon malware infects 6,000 ASUS routers in 72 hours for proxy service BleepingComputer
- TheMoon bot infected 40,000 devices in January and February Security Affairs
- Lumen Disrupts Cybercriminals Targeting Home and Office Routers Quantisnow
Reading Insights
Total Reads
0
Unique Readers
0
Time Saved
4 min
vs 5 min read
Condensed
89%
837 → 94 words
Want the full story? Read the original article
Read on Ars Technica