Hackers Abuse Russian Bulletproof Host Proton66 for Global Attacks and Malware Delivery
Hackers Abuse Russian Bulletproof Host Proton66 for Global Attacks and Malware Delivery
21 April 2025
Cybersecurity researchers have disclosed a surge in "mass scanning, credential brute-forcing, and exploitation attempts" originating from IP addresses associated with a Russian bulletproof hosting service provider named Proton66.
The activity, detected since January 8, 2025, targeted organizations worldwide, according to a two-part analysis published by Trustwave SpiderLabs last week.
"Net