TTPwire Vol. 1 · MITRE ATT&CK·Tagged

← All stories

Infosecurity Magazine

Law Enforcement Dismantles SocksEscort Proxy Network in Operation Lightning

2026-03-13 · Read original ↗

ATT&CK techniques detected

5 predictions
T1090.003Multi-hop Proxy
62%
"law enforcement dismantles socksescort proxy network in operation lightning international law enforcement partners have executed operation lightning and dismantled malicious proxy service ‘ socksescort. ’ the proxy service is alleged to have compromised over 360, 000 routers and …"
T1090Proxy
57%
"law enforcement dismantles socksescort proxy network in operation lightning international law enforcement partners have executed operation lightning and dismantled malicious proxy service ‘ socksescort. ’ the proxy service is alleged to have compromised over 360, 000 routers and …"
T1090.002External Proxy
51%
"law enforcement dismantles socksescort proxy network in operation lightning international law enforcement partners have executed operation lightning and dismantled malicious proxy service ‘ socksescort. ’ the proxy service is alleged to have compromised over 360, 000 routers and …"
T1090.003Multi-hop Proxy
45%
"- of - service ( ddos ) attacks and the distribution of child sexual abuse material ( csam ). to get access to the proxy service, customers had to use a payment platform that made it possible to anonymously purchase the service using cryptocurrency. it is estimated that this paym…"
T1583.005Botnet
36%
"law enforcement dismantles socksescort proxy network in operation lightning international law enforcement partners have executed operation lightning and dismantled malicious proxy service ‘ socksescort. ’ the proxy service is alleged to have compromised over 360, 000 routers and …"

Summary

Operation Lightning sees international law enforcement partners shut down ‘SocksEscort,’ a major malicious proxy service used by cybercriminals worldwide