ProxyNation: The dark nexus between proxy apps and malware

Executive summary

AT&T Alien Labs researchers recently discovered a massive campaign of threats delivering a proxy server application to Windows machines. A company is charging for proxy service on traffic that goes through those machines. This is a continuation of research described in our blog on Mac systems turned into proxy exit nodes by AdLoad.

In this research, Alien Labs identified a company that offers proxy services, wherein proxy requests are rerouted through compromised systems that have been transformed into …

alien amp application apps blog campaign dark executive labs mac machines mac systems malware nexus our blog proxy proxy server proxy service research researchers server service systems threats traffic windows