Detect early. Multi-source infrastructure intelligence, delivered in real time, detections, context, and signals you can act on.

United Kingdom
Infrawatch retweeted
🇨🇳 New research: we counted the servers reselling Western frontier AI into China. 73,000 of them, tracked continuously. Two open-source projects run three quarters of the market. A third of it sits on Alibaba, Tencent, Huawei or ByteDance networks. infrawatch.com/blog/73000-se…
5
8
2,540
We’re excited to share that Infrawatch is co-sponsoring CISO Karaoke at Black Hat USA 2026! 📍 House of Blues Las Vegas, inside Mandalay Bay Hotel & Casino 📅 Tuesday, August 4th 🕘 9:00 PM - Midnight infrawatch.com/blog/ciso-kar…
1
4
904
Infrawatch retweeted
A single platform powers 87 SIM farm proxy networks across 17 countries, this was fun looking into it! Definitely worth the read.
👀 NEW FROM US: Infrawatch identified 87 SIM farms across 17 countries. SIM farms are now for sale, to anyone. We’ve uncovered a service that enables anyone, regardless of technical skill, to operate their own SIM farm. infrawatch.com/blog/inside-t…
1
2
9
1,723
Infrawatch identified 87 SIM farms across 17 countries, 24 commercial proxy providers, 35 cellular providers, 94 phone-farm locations across North America, Europe & South America, including a distributed presence across 19 U.S. states. Report coming tomorrow.. 👀🚜📱
3
3
20
2,102
👀 NEW FROM US: Infrawatch identified 87 SIM farms across 17 countries. SIM farms are now for sale, to anyone. We’ve uncovered a service that enables anyone, regardless of technical skill, to operate their own SIM farm. infrawatch.com/blog/inside-t…
2
10
2,709
Following today’s NCSC + U.S. DOJ disclosures on APT28 DNS hijacking activity, Infrawatch identified at least 18.6K likely victims across 87 countries. We’ve published a victimology dashboard with victim breakdowns and a public IP checker: infrawatch.com/blog/apt28-dn…
6
16
1,668
The foundations are being laid. 2026 is when it gets real. 🚀
1
4
891
Infrawatch retweeted
Infrawatch researchers look into DSLRoot, a distributed residential proxy network across U.S. infrastructure, using hardware deployed in at least 20 states. infrawatch.app/blog/dslroot-…
1
9
28
2,967
Also see Brian's post here: krebsonsecurity.com/2025/08/…. This was a great collaboration which led us down new paths to investigate! 🤖
5
19
2,799
New research Tuesday: How is a Belarus company convincing US military personnel to install network devices in their homes? Our investigation into DSLRoot reveals Americans are unknowingly helping foreign actors build proxy infrastructure on US soil.
2
65
473
220,874
A sneak peek at our dashboard 👀 Hunt threats across VPN, malware, residential proxy and internet-scanning data in real-time. Get instant context across the entire internet. 🥇 Be among the first - BETA access still accepting applications: infrawatch.app/beta-access
2
10
1,334
Infrawatch retweeted
Infrawatch researchers explore GhostSocks, a Golang-based SOCKS5 backconnect proxy malware, detailing its integration with LummaC2 and its command-and-control infrastructure. infrawatch.app/blog/ghostsoc…
13
50
3,909
GhostSocks: A SOCKS5 backconnect malware enhancing LummaC2 infections. Our latest analysis covers its technical details, infrastructure, and how it improves credential fraud success. Learn more about about GhostSocks here 👉🏻 infrawatch.app/blog/ghostsoc…
1
3
18
1,565
No more waiting on predefined scans from third-party tools. Customise probes, target specific IPv4/IPv6 ranges, ASNs, countries, or the entire 🌎 - and act immediately. Probe deeper into the internet. 👉🏻 infrawatch.app/blog/introduc…
4
15
2,551