Threats Tagged 'backconnect infrastructure'

Bandwidth-sharing applications like Peer2Profit recruit users to share their internet connections for payment, which are then monetized by commercial proxy services such as Astroproxy at significantly higher rates. These applications install with user consent via official channels, making detection by traditional security tools difficult. Research identified over 117,000 unique IPs in 72 hours, with residential IP pools growing rapidly. The proxy networks can access internal network resources through DNS entries resolving to internal IPs, posing risks of internal asset exposure. The scale and legitimacy of these networks create potential security risks for organizations where employee devices participate unknowingly.