US, Europol Crack Down on SocksEscort Residential Proxy Network
The US and other international partners seized 34 SocksEscort domains and 23 servers in seven countries. The U.S. also froze $3.5 million in cryptocurrency.
The US and other international partners seized 34 SocksEscort domains and 23 servers in seven countries. The U.S. also froze $3.5 million in cryptocurrency.
Out of 42 unique zero days tracked by Google in 2025, 18 were attributed to CSVs, while 15 were linked to state-sponsored espionage groups.
Google said it has found 53 victims that have been impacted by the group, which it has tracked since 2017.
In a parallel Tuesday announcement, the Treasury Department also sanctioned the exploit broker network that had acquired the tools.
Exploitation of CVE-2026-1281 and CVE-2026-1340 is “widespread and mostly automated," according to Unit 42 researchers.
The hardcoded credential vulnerability (CVE-2026-22769) exists in Dell RecoverPoint for Virtual Machines and has been exploited since mid-2024.