Detect early. Multi-source infrastructure intelligence, delivered in real time, detections, context, and signals you can act on.
United Kingdom
Joined December 2023
- Tweets21
- Following0
- Followers737
- Likes84
Pinned Tweet
Foreign-controlled proxy network "DSLRoot" has deployed hardware in 300+ U.S. homes across 20+ states-including military residences.
Full investigation now live: infrawatch.app/blog/dslroot-…
Infrawatch retweeted
⚡️ New from us: is your Fridge a Residential Proxy?
Across 10.3K active refrigeration hosts, we also identified 56 active residential proxy hosts exposing refrigeration controls.
We identified reaches Food Production, Logistics, Pharma and Life Sciences all being affected.
infrawatch.com/blog/exposed-…
Infrawatch retweeted
🇨🇳 New research: we counted the servers reselling Western frontier AI into China. 73,000 of them, tracked continuously.
Two open-source projects run three quarters of the market. A third of it sits on Alibaba, Tencent, Huawei or ByteDance networks.
infrawatch.com/blog/73000-se…
🇨🇳 New research: we counted the servers reselling Western frontier AI into China. 73,000 of them, tracked continuously.
Two open-source projects run three quarters of the market. A third of it sits on Alibaba, Tencent, Huawei or ByteDance networks.
infrawatch.com/blog/73000-se…
We’re excited to share that Infrawatch is co-sponsoring CISO Karaoke at Black Hat USA 2026!
📍 House of Blues Las Vegas, inside Mandalay Bay Hotel & Casino
📅 Tuesday, August 4th
🕘 9:00 PM - Midnight
infrawatch.com/blog/ciso-kar…
Infrawatch retweeted
A single platform powers 87 SIM farm proxy networks across 17 countries, this was fun looking into it! Definitely worth the read.
👀 NEW FROM US: Infrawatch identified 87 SIM farms across 17 countries.
SIM farms are now for sale, to anyone. We’ve uncovered a service that enables anyone, regardless of technical skill, to operate their own SIM farm.
infrawatch.com/blog/inside-t…
👀 NEW FROM US: Infrawatch identified 87 SIM farms across 17 countries.
SIM farms are now for sale, to anyone. We’ve uncovered a service that enables anyone, regardless of technical skill, to operate their own SIM farm.
infrawatch.com/blog/inside-t…
Following today’s NCSC + U.S. DOJ disclosures on APT28 DNS hijacking activity, Infrawatch identified at least 18.6K likely victims across 87 countries.
We’ve published a victimology dashboard with victim breakdowns and a public IP checker:
infrawatch.com/blog/apt28-dn…
Infrawatch retweeted
Infrawatch researchers look into DSLRoot, a distributed residential proxy network across U.S. infrastructure, using hardware deployed in at least 20 states. infrawatch.app/blog/dslroot-…
Also see Brian's post here: krebsonsecurity.com/2025/08/…. This was a great collaboration which led us down new paths to investigate! 🤖
New research Tuesday: How is a Belarus company convincing US military personnel to install network devices in their homes?
Our investigation into DSLRoot reveals Americans are unknowingly helping foreign actors build proxy infrastructure on US soil.
A sneak peek at our dashboard 👀
Hunt threats across VPN, malware, residential proxy and internet-scanning data in real-time. Get instant context across the entire internet.
🥇 Be among the first - BETA access still accepting applications: infrawatch.app/beta-access
Infrawatch retweeted
Infrawatch researchers explore GhostSocks, a Golang-based SOCKS5 backconnect proxy malware, detailing its integration with LummaC2 and its command-and-control infrastructure. infrawatch.app/blog/ghostsoc…
GhostSocks: A SOCKS5 backconnect malware enhancing LummaC2 infections.
Our latest analysis covers its technical details, infrastructure, and how it improves credential fraud success.
Learn more about about GhostSocks here 👉🏻
infrawatch.app/blog/ghostsoc…
No more waiting on predefined scans from third-party tools.
Customise probes, target specific IPv4/IPv6 ranges, ASNs, countries, or the entire 🌎 - and act immediately.
Probe deeper into the internet.
👉🏻 infrawatch.app/blog/introduc…