#SOCKS5
This archive collects reporting on application-layer proxies in cybersecurity, covering both legitimate use and patterns of abuse. Readers will find stories on traffic hiding, control evasion, command infrastructure, and the techniques that often surface in intrusion, fraud, and monitoring campaigns across Latin America.
Brazil financial sector targeted by Unit 42
Unit 42 found two active campaigns in Latin America. One targeted Brazil's financial sector with job phishing, RATs and SOCKS5 tunnels.
Sep 14, 2026 · 2 min
Mexico, Brazil, Ecuador in CL-CRI-1131, 1163
Unit 42 tracked two AI-assisted intrusion clusters in Mexico, Ecuador and Brazil, using NextChat, Claude
Sep 7, 2026 · 38 min