Pacing Remediation of Internet-Facing Vulnerabilities
Research
Cyentia Fast And Frivolous
Explore other posts
Catch Me If You Can: Inside the Anonymization-for-Hire Network
Wade takes viewers inside the full commercial stack behind CanOworms — tenants, relay fleet, resellers, and landlord ASNs — and explains why treating a threat-feed-flagged C2 as a single actor's infrastructure can lead defenders to the wrong conclusion entirely.
STRIKE Alert
STRIKE News
Catch Me If You Can: New Research Reveals CanOworms, a Proxy Network for Hire
Blocklists, geolocation, and ASN reputation all share one assumption: that an IP tells you who's behind it. CanOworms is built to break that assumption. STRIKE identified 633 confirmed member servers operating as a shared Squid/SOCKS/OpenVPN/IPsec relay fleet — not a command-and-control panel, but the disposable front in front of one.
LapDogs Is Back: Inside UAT-7810’s Expanding ORB Network and Its New Servers
Executive Summary: The latest Cisco Talos research shows these operators did not abandon the LapDogs ORB network after exposure.
STRIKE Alert
STRIKE News