Thursday 22 October 2026 23:17:23 GMT+02:00

Netcrook

HomeManifesto
News
Techcrook
Geocrook
WikicrookTeamAppContact
EnglishItaliano

WIKICROOK

Proxy abuse

Using infected devices to relay traffic so the real origin of activity is hidden.

Proxy abuse is the use of compromised devices as traffic relays. Instead of connecting directly to a target service, an attacker sends requests through infected phones, routers, TVs, or embedded systems so the apparent source is the victim device, not the operator. This hides the real origin of the activity and can make blocking, attribution, and legal tracing much harder.

In cyber security, proxy abuse matters because it turns ordinary endpoints into criminal infrastructure. Botnets use these proxies for ad fraud, credential attacks, scraping, spam, and location masking. Defenders may notice unusual outbound connections, high bandwidth use, or devices making traffic to many unrelated destinations. Mitigation includes locking down firmware and app installs, monitoring egress, isolating suspicious hosts, and rebuilding compromised devices from trusted images.

← WIKICROOK index