🎯Basically, ProxySmart helps people run fake phone networks to commit fraud.
What Happened
A recent investigation by Infrawatch revealed that a software platform named ProxySmart is powering SIM farm proxy networks across 17 countries. These networks consist of racks of phones and 4G modems that are rented out as commercial mobile proxy services. Infrawatch identified 94 locations where these farms operate, with a significant concentration in the United States.
Who's Affected
The presence of these SIM farms spans multiple regions, including North America, Europe, and South America. Infrawatch's findings indicate that the majority of these operations are based in the U.S., affecting various sectors that rely on mobile connectivity for legitimate purposes.
What Data Was Exposed
While the investigation primarily focuses on the operational aspects of these farms, the potential for large-scale fraud is significant. The legal grey area surrounding SIM farms allows them to operate with minimal disruption, raising alarms about their use in fraudulent activities targeting platforms like Instagram and Facebook.
How ProxySmart Works
ProxySmart operates on a per-SIM pricing model and offers features like device management, automated IP rotation, and anti-bot countermeasures. The platform allows operators to obscure the physical origin of their farms by routing traffic through a reverse proxy. This setup enables the farms to present themselves as legitimate mobile connections, complicating detection efforts.
Geographic Spread and Carrier Coverage
The farms identified by Infrawatch are located in major metropolitan areas with strong 4G/5G coverage. They connect through various carriers, including AT&T, Verizon, and Vodafone, among others. This extensive reach makes it easier for these operations to blend into the legitimate telecom landscape.
Detection Fingerprint
Infrawatch has noted that the ProxySmart control panel produces a consistent HTTP response, which can be queried for detection purposes. This fingerprinting capability could aid in identifying and mitigating these fraudulent operations.
What You Should Do
Organizations should remain vigilant against the potential impacts of these SIM farms. Implementing robust KYC verification processes and monitoring for suspicious activity can help mitigate risks associated with proxy services. Additionally, staying informed about the evolving landscape of mobile proxy networks is crucial for maintaining cybersecurity defenses.
🔒 Pro insight: The scale of ProxySmart's operations suggests a significant risk for fraud, requiring immediate attention from cybersecurity teams.
