Detect early. Multi-source infrastructure intelligence, delivered in real time, detections, context, and signals you can act on.
United Kingdom
Joined December 2023
- Tweets20
- Following0
- Followers729
- Likes83
Pinned Tweet
Foreign-controlled proxy network "DSLRoot" has deployed hardware in 300+ U.S. homes across 20+ states-including military residences.
Full investigation now live: infrawatch.app/blog/dslroot-…
Infrawatch retweeted
🇨🇳 New research: we counted the servers reselling Western frontier AI into China. 73,000 of them, tracked continuously.
Two open-source projects run three quarters of the market. A third of it sits on Alibaba, Tencent, Huawei or ByteDance networks.
infrawatch.com/blog/73000-se…
🇨🇳 New research: we counted the servers reselling Western frontier AI into China. 73,000 of them, tracked continuously.
Two open-source projects run three quarters of the market. A third of it sits on Alibaba, Tencent, Huawei or ByteDance networks.
infrawatch.com/blog/73000-se…
We’re excited to share that Infrawatch is co-sponsoring CISO Karaoke at Black Hat USA 2026!
📍 House of Blues Las Vegas, inside Mandalay Bay Hotel & Casino
📅 Tuesday, August 4th
🕘 9:00 PM - Midnight
infrawatch.com/blog/ciso-kar…
Infrawatch retweeted
A single platform powers 87 SIM farm proxy networks across 17 countries, this was fun looking into it! Definitely worth the read.
👀 NEW FROM US: Infrawatch identified 87 SIM farms across 17 countries.
SIM farms are now for sale, to anyone. We’ve uncovered a service that enables anyone, regardless of technical skill, to operate their own SIM farm.
infrawatch.com/blog/inside-t…
Infrawatch identified 87 SIM farms across 17 countries, 24 commercial proxy providers, 35 cellular providers, 94 phone-farm locations across North America, Europe & South America, including a distributed presence across 19 U.S. states.
Report coming tomorrow.. 👀🚜📱
This is now live here: infrawatch.com/blog/inside-t…
👀 NEW FROM US: Infrawatch identified 87 SIM farms across 17 countries.
SIM farms are now for sale, to anyone. We’ve uncovered a service that enables anyone, regardless of technical skill, to operate their own SIM farm.
infrawatch.com/blog/inside-t…
Following today’s NCSC + U.S. DOJ disclosures on APT28 DNS hijacking activity, Infrawatch identified at least 18.6K likely victims across 87 countries.
We’ve published a victimology dashboard with victim breakdowns and a public IP checker:
infrawatch.com/blog/apt28-dn…
Infrawatch retweeted
Infrawatch researchers look into DSLRoot, a distributed residential proxy network across U.S. infrastructure, using hardware deployed in at least 20 states. infrawatch.app/blog/dslroot-…
Also see Brian's post here: krebsonsecurity.com/2025/08/…. This was a great collaboration which led us down new paths to investigate! 🤖
New research Tuesday: How is a Belarus company convincing US military personnel to install network devices in their homes?
Our investigation into DSLRoot reveals Americans are unknowingly helping foreign actors build proxy infrastructure on US soil.
A sneak peek at our dashboard 👀
Hunt threats across VPN, malware, residential proxy and internet-scanning data in real-time. Get instant context across the entire internet.
🥇 Be among the first - BETA access still accepting applications: infrawatch.app/beta-access
Infrawatch retweeted
Infrawatch researchers explore GhostSocks, a Golang-based SOCKS5 backconnect proxy malware, detailing its integration with LummaC2 and its command-and-control infrastructure. infrawatch.app/blog/ghostsoc…
GhostSocks: A SOCKS5 backconnect malware enhancing LummaC2 infections.
Our latest analysis covers its technical details, infrastructure, and how it improves credential fraud success.
Learn more about about GhostSocks here 👉🏻
infrawatch.app/blog/ghostsoc…
No more waiting on predefined scans from third-party tools.
Customise probes, target specific IPv4/IPv6 ranges, ASNs, countries, or the entire 🌎 - and act immediately.
Probe deeper into the internet.
👉🏻 infrawatch.app/blog/introduc…