Proxy abuse is the use of compromised devices as traffic relays. Instead of connecting directly to a target service, an attacker sends requests through infected phones, routers, TVs, or embedded systems so the apparent source is the victim device, not the operator. This hides the real origin of the activity and can make blocking, attribution, and legal tracing much harder.
In cyber security, proxy abuse matters because it turns ordinary endpoints into criminal infrastructure. Botnets use these proxies for ad fraud, credential attacks, scraping, spam, and location masking. Defenders may notice unusual outbound connections, high bandwidth use, or devices making traffic to many unrelated destinations. Mitigation includes locking down firmware and app installs, monitoring egress, isolating suspicious hosts, and rebuilding compromised devices from trusted images.


