TI Mindmap HUB
Threat Intelligence Report

AVrecon Malware-Infected Routers Exploited as Residential Proxies by SocksEscort

📅 March 21, 2026 📰 www.ic3.gov 🔍 0 CVE(s) referenced

Threat actors leveraged AVrecon malware to compromise hundreds of thousands of routers worldwide, turning them into residential proxies for illicit activities via the SocksEscort service, which has now been dismantled by international law enforcement.

gov

Sign in to access the full report including:
detailed analysis, IOCs, MITRE ATT&CK mapping, and STIX bundle.

🔐 Sign In to Read Full Report

You'll need to accept our Terms of Service to access the platform.

📊 Visual Mindmap
🎯 IOC Extraction
⚔️ MITRE ATT&CK TTPs
📦 STIX 2.1 Bundle