{"id":47162,"date":"2022-06-17T19:38:06","date_gmt":"2022-06-17T19:38:06","guid":{"rendered":"https:\/\/www.threatshub.org\/blog\/international-operation-takes-down-russian-rsocks-botnet\/"},"modified":"2022-06-17T19:38:06","modified_gmt":"2022-06-17T19:38:06","slug":"international-operation-takes-down-russian-rsocks-botnet","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/international-operation-takes-down-russian-rsocks-botnet\/","title":{"rendered":"International operation takes down Russian RSOCKS botnet"},"content":{"rendered":"

A Russian operated botnet known as RSOCKS has been shut down by the US Department of Justice acting with law enforcement partners in Germany, the Netherlands and the UK. It is believed to have compromised millions of computers and other devices around the globe.<\/p>\n

The RSOCKS botnet functioned as an IP proxy service, but instead of offering legitimate IP addresses leased from internet service providers, it was providing criminals with access to the IP addresses of devices that had been compromised by malware, according to a statement<\/a> from the US Attorney\u2019s Office in the Southern District of California.<\/p>\n

It seems that RSOCKS initially targeted a variety of Internet of Things (IoT) devices, such as industrial control systems, routers, audio\/video streaming devices and various internet connected appliances, before expanding into other endpoints such as Android devices and computer systems.<\/p>\n