Authorities dismantle SocksEscort proxy network and seize crypto

US and European authorities said Thursday they disrupted SocksEscort, a malicious proxy service used by cybercriminals to hide their identities while carrying out fraud, including cryptocurrency account takeovers. The DOJ said the service compromised at least 369,000 routers and other internet-connected devices in 163 countries, giving cybercriminals control over proxies that hid their true IP addresses.

The platform reportedly enabled crimes, including bank fraud and cryptocurrency account takeovers, since 2020. In one case cited by prosecutors, a victim in New York lost roughly $1 million in cryptocurrency. Authorities said they seized 34 domains, disrupted about two dozen servers across seven countries and froze about $3.5 million in cryptocurrency linked to the operation.

Investigators estimate SocksEscort received at least 5 million euros ($5.7 million) from its users. Europol said customers accessed the service via a payment platform that allowed them to purchase it anonymously with cryptocurrency.

United States, New York

socksescort, proxy service, cryptocurrency, account takeovers, bank fraud, doj, routers, domains, servers, europol