Disrupting the World's Largest Residential Proxy Network
Source CIRCL OSINT Feed
0
TLP:WHITE, disclosure is not limited
Description
This report discusses efforts to disrupt the world's largest residential proxy network. The information is based on open-source intelligence with moderate certainty. The activity involves multiple attack techniques including exploitation of public-facing applications, use of alternate authentication materials, and compromise of infrastructure. No specific software versions or vulnerabilities are identified. No patch or fix is available, and there is no evidence of active exploitation in the wild.
Indicators of compromise
Domains 23
- 00857cca77b615c369f48ead5f8eb7f3.com
- 3k7m1n9p4q2r6s8t0v5w2x4y6z8u9.com
- 6b86b273ff34fce1.online
- 8f00b204e9800998.com
- a7b37115ce3cc2eb.com
- e4f8c1b9a2d7e3f6c0b5a8d9e2f1c4d.com
- 0aa0cf0637d66c0d.com
- 31d58c226fc5a0aa976e13ca9ecebcc8.com
- 442fe7151fb1e9b5.com
- 7x2k9n4p1q0r5s8t3v6w0y2z4u7b9.com
Hashes 14
Vulnerability 4
- CVE-2025-55182
- CVE-2025-8088
- CVE-2025-8088
- CVE-2025-55182
Link 7
- https://otx.alienvault.com/pulse/697ad713f6769b6ddf61162b/
- https://cloud.google.com/blog/topics/threat-intelligence/disrupting-largest-residential-proxy-network
- https://vulnerability.circl.lu/vuln/CVE-2025-8088
- https://www.win-rar.com/singlenewsview.html?&L=0&tx_ttnews%5Btt_news%5D=283&cHash=a64b4a8f662d3639dec8d65f47bc93c5
- https://vulnerability.circl.lu/vuln/CVE-2025-55182
- https://www.facebook.com/security/advisories/cve-2025-55182
- https://react.dev/blog/2025/12/03/critical-security-vulnerability-in-react-server-components
Text 8
- Google and partners took action to disrupt the IPIDEA proxy network, believed to be one of the largest residential proxy networks globally. The operation involved legal action to take down control domains, sharing technical intelligence on IPIDEA software development kits, and implementing protections for Android users. IPIDEA's network enabled various malicious activities by routing traffic through residential IP addresses, making it difficult to detect and block. The network was built using SDKs embedded in applications, often without user knowledge. Google's analysis revealed connections between multiple proxy brands and SDKs controlled by the same actors. The disruption aimed to degrade IPIDEA's operations and protect consumers from security risks associated with residential proxies.
- Disrupting the World's Largest Residential Proxy Network
- Report
- This week Google and partners took action to disrupt what we believe is one of the largest residential proxy networks in the world, the IPIDEA proxy network. IPIDEA’s proxy infrastructure is a little-known component of the digital ecosystem leveraged by a wide array of bad actors.
- No Place Like Home Network: Disrupting the World's Largest Residential Proxy Network
- Blog
- PUBLISHED
- PUBLISHED
Imphash 4
- 027ea80e8125c6dda271246922d4c3b0
- eb5bc6ff6263b364dfbfb78bdb48ed59
- dae02f32a21e03ce65412f6e56942daa
- 027ea80e8125c6dda271246922d4c3b0
Datetime 8
- 2017-08-08T15:54:06+00:00
- 2020-03-03T07:25:13+00:00
- 2083-10-10T20:34:47+00:00
- 2017-08-08T15:54:06+00:00
- 2025-08-08T11:11:41.842000+00:00
- 2025-10-21T22:45:21.069000+00:00
- 2025-12-03T15:40:56.894000+00:00
- 2025-12-11T20:15:37.699000+00:00
Size in bytes 4
- 56358856
- 24889336
- 75624
- 43056480
Community reviews
Loading reviews…