Threats
What we see attacking the servers we protect, documented as the investigation goes: the devices, the infrastructure, the signatures an operator can use, and what to do. Living documents, dated and kept up to date.
Proxynvader: inside the TV-box botnet that attacks websites from its victims' living rooms
Published October 22, 2026 · last updated October 30, 2026
A residential proxy network running on infected TV boxes and streaming sticks, the successor of BADBOX 2.0, is attacking the sites we host from millions of homes. What six operators found at their subscribers', the signatures to find the devices, and why France is not answering.