Cybersecurity analysts have revealed an increase in “bulk scanning, credential cracking, and exploitation efforts” emanating from IP addresses linked to a Russian bulletproof hosting service known as Proton66.
The actions, identified since January 8, 2025, have aimed at entities across the globe, as per a two-part assessment released by Trustwave SpiderLabs last week.
“Net