Embed Notice

HTML Code

<blockquote style="position: relative; padding-left: 55px;"><section><a href="https://social.wildeboer.net/users/jwildeboer/statuses/114360228417905396">Jan Wildeboer 😷:krulorange: (jwildeboer@social.wildeboer.net)'s status on Monday, 21-Apr-2025 04:00:41 JST</a><a href="https://social.wildeboer.net/@jwildeboer" title="jwildeboer@social.wildeboer.net"><img src="https://gnusocial.jp/avatar/2767-48-20250205224340.webp" width="48" height="48" alt="Jan Wildeboer 😷:krulorange:" style="position: absolute; left: 0; top: 0;">Jan Wildeboer 😷:krulorange:</a><div><a href="https://social.wildeboer.net/@jwildeboer/114359063537195072" rel="in-reply-to">in reply to</a></div></section><article><p>Addendum: Trend Micro did some research on these companies back in 2023 and it confirms my suspicions. And I guess with AI scraping this kind of business is booming. For the paranoid:</p><p>„There are malicious actors who repacked freeware and shareware written by other people to conduct drive-by downloads of the Infatica peer-to-business (P2B) service“</p><p><a href="https://www.trendmicro.com/vinfo/ae/security/news/vulnerabilities-and-exploits/a-closer-exploration-of-residential-proxies-and-captcha-breaking-services" rel="nofollow noreferrer">https://www.trendmicro.com/vinfo/ae/security/news/vulnerabilities-and-exploits/a-closer-exploration-of-residential-proxies-and-captcha-breaking-services</a></p><p>6/8</p></article><footer><a rel="bookmark" href="https://gnusocial.jp/conversation/4914916#notice-9650058">In conversation</a><time datetime="2025-04-21T04:00:41+09:00" title="Monday, 21-Apr-2025 04:00:41 JST">about 18 days ago</time> <span>from <span><a href="https://social.wildeboer.net/@jwildeboer/114360228417905396" rel="external" title="Sent from social.wildeboer.net via ActivityPub">social.wildeboer.net</a></span></span><a href="https://social.wildeboer.net/@jwildeboer/114360228417905396">permalink</a><h4>Attachments</h4><ol><li><label><a rel="external" href="https://gnusocial.jp/attachment/4497745">During our one month of observation, we have seen the following suspicious or malicious behaviors that Infatica proxy customers are doing via the service:Bruteforcing of Simperium, a cross-site data synchronization service
Bruteforcing of Bitwarden
Scraping of house prices
Scraping of Lazada and Walmart prices
Creating accounts on Live.com, Instagram, and Mail.RU</a></label><br><a href="https://cdn.masto.host/socialwildeboernet/media_attachments/files/114/360/220/833/046/193/original/5310f130924d8a19.jpeg" rel="external">https://cdn.masto.host/socialwildeboernet/media_attachments/files/114/360/220/833/046/193/original/5310f130924d8a19.jpeg</a></li><li><label><a rel="external" href="https://gnusocial.jp/attachment/4497746">After paying for a trial plan, we received a VAT invoice that states that Infatica is registered as a company in Singapore.The address appears to be associated to a Russian-owned organization and a Russian-Asian Sports Academy. Based on our investigation, Infatica’s bank account is with the Community Federal Savings Bank, which is located in the US. It’s also possible that their banking service is proxied by TransferWise.</a></label><br><a href="https://cdn.masto.host/socialwildeboernet/media_attachments/files/114/360/223/430/244/990/original/f72e385c2a718cf2.jpeg" rel="external">https://cdn.masto.host/socialwildeboernet/media_attachments/files/114/360/223/430/244/990/original/f72e385c2a718cf2.jpeg</a></li></ol></footer></blockquote>

Corresponding Notice

Embed this notice
Jan Wildeboer 😷:krulorange: (jwildeboer@social.wildeboer.net)'s status on Monday, 21-Apr-2025 04:00:41 JST Jan Wildeboer 😷:krulorange:
in reply to
Addendum: Trend Micro did some research on these companies back in 2023 and it confirms my suspicions. And I guess with AI scraping this kind of business is booming. For the paranoid:
„There are malicious actors who repacked freeware and shareware written by other people to conduct drive-by downloads of the Infatica peer-to-business (P2B) service“
https://www.trendmicro.com/vinfo/ae/security/news/vulnerabilities-and-exploits/a-closer-exploration-of-residential-proxies-and-captcha-breaking-services
6/8
In conversation18 days ago from social.wildeboer.netpermalink
Attachments
1. During our one month of observation, we have seen the following suspicious or malicious behaviors that Infatica proxy customers are doing via the service: Bruteforcing of Simperium, a cross-site data synchronization service Bruteforcing of Bitwarden Scraping of house prices Scraping of Lazada and Walmart prices Creating accounts on Live.com, Instagram, and Mail.RU
  https://cdn.masto.host/socialwildeboernet/media_attachments/files/114/360/220/833/046/193/original/5310f130924d8a19.jpeg
2. After paying for a trial plan, we received a VAT invoice that states that Infatica is registered as a company in Singapore.The address appears to be associated to a Russian-owned organization and a Russian-Asian Sports Academy. Based on our investigation, Infatica’s bank account is with the Community Federal Savings Bank, which is located in the US. It’s also possible that their banking service is proxied by TransferWise.
  https://cdn.masto.host/socialwildeboernet/media_attachments/files/114/360/223/430/244/990/original/f72e385c2a718cf2.jpeg

Public

Embed Notice

HTML Code

Corresponding Notice