Open source research and talks on threat intelligence, fingerprinting, and fraud detection.
10/25/2024- Anti-Fraud W3 Community Group - An Emprical Analysis of Residential Proxies03/27/2025- Anti-Fraud W3 Community Group - Mitigating Fingerprint Impersonation10/23/2025- [TLP:AMBER] Anti-Fraud W3 Community Group - Residential Proxy Landscape 202504/07/2026- [TLP:AMBER] M3AAWG - The Botnet Ecosystem Powering Residential Proxies
09/09/2025- Announcing the Synthient IP Risk Database09/30/2025- GhostSocks: From Initial Access to Residential Proxy10/21/2025- The Stealer Log Ecosystem: Processing Millions of Credentials a Day12/02/2025- IPCola: A Tangled Mess01/02/2026- A Broken System Fueling Botnets03/30/2026- ProxyBox: Socks5Systemz Lives On06/09/2026- Who are the victims of residential proxies?06/19/2026- Popa from Sourcing to Distribution
10/22/2025- Inside the Synthient Threat Data10/29/2025- Aisuru Botnet Shifts from DDoS to Residential Proxies01/02/2026- The Kimwolf Botnet is Stalking Your Local Network04/07/2026- From DDoS to Residential Proxies: The Shifting Botnet Threat Keeping M3AAWG on High Alert06/18/2026- ‘Popa’ Botnet Linked to Publicly-Traded Israeli Firm