AVrecon botnet linked to SocksEscort proxy service

Threat actors have used the AVrecon botnet malware, which was initially reported by Lumen Black Lotus to have been compromising small office/home office routers, to support the SocksEscort malware proxy service, which allows renting of hacked devices for location concealment, The Hacker News reports.

avrecon avrecon botnet black lotus botnet concealment devices endpointdevice-security hacked hacker home home office location lumen malware office proxy proxy service renting reports routers service socksescort support threat threat actors