Asocks

ASOCKS, also associated with Nexusnet, is a malicious residential proxy service tied to a broader criminal ecosystem that monetizes access to compromised devices as proxy infrastructure. It has been linked to botnet-backed proxy operations in which infected endpoints are offered directly to customers and through reseller partnerships, contributing to the resilience of the underground proxy market even after law-enforcement disruption. Dutch authorities disrupted ASOCKS and Nexusnet, but the operation reportedly continued through resale relationships with other providers. ASOCKS has been observed at a substantially smaller scale than its public claims, with independent observation placing its active proxy population in the low hundreds of thousands rather than the many millions it advertised. Its role in the ecosystem is consistent with malicious proxy operators that both control infected-device pools and broker access obtained from partner services, allowing continuity of operations despite takedowns. This places ASOCKS within a mature cybercriminal supply chain centered on compromised consumer and edge devices and the resale of anonymized network access. The available information supports characterization of ASOCKS as a financially motivated criminal service provider involved in proxy-enabled post-compromise monetization and operational resilience through partner reselling. Specific high-confidence attribution to a nation state, source country, victim-country set, or industry targeting is not currently available.