Research
Research & Intelligence
Research on proxy networks, botnets, credential stuffing, threat actor tradecraft, and internet infrastructure from the Synthient team.
The Internals of a Badbox Operation
Synthient’s investigation traces more than 1.3 million backdoored Android devices to Videostrong, revealing how the x.cpe backdoor distributes residential...
Malware
IPWeb: Peering from Within
Synthient’s research reveals how the APSolo proxy botnet sources compromised devices for IPWeb. Recovered client and backend source code links the malware to...
Synthient
Synthient Version 4
Synthient version 4 brings one of the largest updates to the platform so far. This release aims to improve developer experience, stability, and overall data...
Research
Popa: From Sourcing to Distribution
Popa is an Android proxyware SDK that turns consumer devices (phones, tablets, streaming boxes) into residential proxy nodes. It ships inside third-party...
Research
Who Are The Victims of Residential Proxies?
Our latest research reveals how modern residential proxy networks use "AI marketing" to hide a darker reality of global device exploitation. By tracking...
Malware
ProxyBox: Socks5Systemz Lives On
Synthient’s Research Team continuously tracks Black Hat proxy services due to the significant risks they pose to clients in the financial sector. Recently, a...
Malware
A Broken System Fueling Botnets
Synthient continues to track the Kimwolf DDoS and proxy botnet with this report, delivering significant findings on the inner workings, infection chain, and...