A court-authorized international law enforcement operation led by the U.S. Department of Justice has disrupted SocksEscort, a large residential proxy network that allegedly exploited thousands of internet routers worldwide to facilitate cybercrime and financial fraud.
Authorities said the U.S. government executed seizure warrants against dozens of internet domains registered in the United States that were allegedly connected to the criminal infrastructure. The announcement was made by U.S. Attorney Eric Grant.
According to court documents, the SocksEscort network infected home and small business routers with malware, allowing operators to redirect internet traffic through compromised devices
The network then sold access to these infected routers as proxy services to customers seeking to hide their true locations online.
Investigators said the service had been operating since at least the summer of 2020 and offered access to roughly 369,000 IP addresses at various points
As of February 2026, the SocksEscort platform listed about 8,000 infected routers available for purchase, including around 2,500 located in the United States.
Cybercriminals allegedly used the proxy network to conceal their identities while carrying out a range of fraudulent activities. These included account takeovers targeting U.S. bank accounts and cryptocurrency platforms, as well as schemes involving fraudulent unemployment insurance claims.
Authorities said the crimes caused millions of dollars in losses to victims. Among the cases cited by investigators was a New York resident who lost approximately $1 million in cryptocurrency from an exchange account
In another case, a manufacturing company in Pennsylvania lost $700,000, while current and former U.S. service members using Military Star credit cards were defrauded of about $100,000.
The operation involved coordinated action by international partners, with law enforcement agencies in Austria, France, and the Netherlands helping dismantle key SocksEscort servers.
The investigation is being led by the Federal Bureau of Investigation Sacramento Field Office, along with the Department of Defense Office of Inspector General’s Defense Criminal Investigative Service and IRS Criminal Investigation.
Authorities said the operation highlights the growing importance of international cooperation in combating cybercrime networks that exploit global digital infrastructure.
Your web3 identity + services + payments in one single link. Get your pay3.so link today.
Disclaimer: The information on this page may come from third parties and does not represent the views or opinions of Gate. The content displayed on this page is for reference only and does not constitute any financial, investment, or legal advice. Gate does not guarantee the accuracy or completeness of the information and shall not be liable for any losses arising from the use of this information. Virtual asset investments carry high risks and are subject to significant price volatility. You may lose all of your invested principal. Please fully understand the relevant risks and make prudent decisions based on your own financial situation and risk tolerance. For details, please refer to
Disclaimer.
Related Articles
Crypto Trading Firm BlockFills Seeks Chapter 11 Protection
BlockFills filed Chapter 11 after reporting $50–$100M in assets against $100–$500M in liabilities.
The firm suspended client withdrawals in February as liquidity pressures and a $75M loss emerged.
A Dominion Capital lawsuit alleging asset misappropriation led to a court order freezing
CryptoFrontNews44m ago
South Korean Court Rejects Flow Foundation's Request to Stop Three Exchanges from Delisting FLOW
The Seoul Central District Court in South Korea rejected a motion for a preliminary injunction filed by the Flow Foundation and Dapper Labs against three exchanges, supporting their termination of FLOW trading. The court determined that there was insufficient evidence and prioritized investor protection. FLOW remains tradable on Korbit, but has been delisted from the other three exchanges.
GateNews1h ago
Institutional Crypto Lender BlockFills Files Chapter 11 in Delaware
Institutional crypto trading and lending firm BlockFills has filed for Chapter 11 bankruptcy protection in the United States, marking the latest setback for the digital asset lending sector after weeks of operational turmoil.
In a statement shared on X on March 16, the company said that after
TodayqNews1h ago
Steam 8 games embedded with malware, FBI targets victims from 2024 to 2026
The U.S. FBI is investigating 8 PC games on the Steam platform that are suspected of containing malware, primarily targeting users who downloaded them between 2024 and 2026. Victims can submit information through the FBI to receive compensation. This incident demonstrates that Steam's massive user base makes it a target for malicious attacks, and cryptocurrency assets are becoming a primary target of such attacks.
MarketWhisper2h ago
SEC Withdraws BitClout Founder Lawsuit and Bars Refiling, Signaling Shift in Crypto Regulation
The U.S. Securities and Exchange Commission (SEC) withdrew its lawsuit against Nader Al-Naji on March 16, ending a two-year legal dispute and marking a shift in the crypto regulatory environment. The withdrawal was partly based on the SEC's reassessment of its regulatory framework and evidence, but does not affect other cases. Al-Naji was accused of using funds raised through BitClout for personal expenses and has now reached a settlement. This matter demonstrates a gradual shift in the U.S. crypto regulatory approach.
GateNews2h ago
BlockFills Files Chapter 11 Bankruptcy With Liabilities Up to $500 Million
Chicago-based cryptocurrency trading company BlockFills and its parent company Reliz Ltd. recently filed for Chapter 11 bankruptcy protection with U.S. courts due to ongoing financial difficulties and liquidity issues. The company's assets are estimated between $50 million and $100 million, while liabilities reach $500 million, indicating severe financial pressure. The company previously suspended customer deposit and withdrawal services due to liquidity shortages and faced court-imposed asset restrictions due to litigation over misappropriation of funds. The bankruptcy filing aims to reorganize cash flows and maintain transparency. This incident highlights structural vulnerabilities in the cryptocurrency lending market.
MarketWhisper3h ago
