Proton66: The Cybercriminal’s Playground for Malicious Mischief
Proton66, a Russian autonomous system, has become a cybercriminal’s dream come true, offering bulletproof hosting for a variety of malicious campaigns. Since January 2025, attacks have surged, targeting organizations globally. From ransomware to phishing, Proton66 is the villain of the tech and finance sectors’ nightmares.
Hot Take:
Who needs a haunted house when you have Proton66? This Russian autonomous system is serving more scares to cybersecurity experts than a Halloween special, with its bulletproof hosting services for cybercriminals. It’s like the Airbnb of the dark web!
Key Points:
- Proton66 (AS198953) is linked to bulletproof hosting services, supporting malicious campaigns.
- This Russian autonomous system has been active since January 2025, targeting tech and financial sectors.
- It supports various attacks, including SuperBlack ransomware, XWorm infections, and phishing campaigns.
- Threat actors exploited vulnerabilities in D-Link, Fortinet, Mitel, and Palo Alto devices.
- Proton66’s services include hosting C&C servers for malware like WeaXor ransomware.
Already a member? Log in here