Cybercriminals Are Hiding Malicious Web Traffic in Plain Sight
Briefly

The article discusses how cybercriminals have shifted from using bulletproof hosting services to employing proxies, particularly purpose-built VPNs that mask IP addresses and anonymize traffic. This transition is a response to intensified law enforcement scrutiny. Researcher Thibault Seret highlighted that while the technology used in proxies is not new, its adoption among criminals has grown significantly. One major challenge is the ability to distinguish malicious traffic from legitimate traffic, complicating efforts to combat cybercrime effectively.
"The issue is, you cannot technically distinguish which traffic in a node is bad and which traffic is good... It's good in terms of internet freedom, but it's super, super tough to analyze what's happening and identify bad activity."
"The transition to using proxies among cybercriminals over the last couple of years is significant."
Read at WIRED
[
|
]