P.S. Silent Push announced we acquired Hyas today 🚀
www.silentpush.com/news/silent-...

Our team will be speaking more about BPH’s in the coming months as we encourage more law enforcement actions and private responses to these growing challenges.

Read our final 2025 White Paper "Shining a Light on the Global Bulletproof Hosting Ecosystem" @ www.silentpush.com/white-papers...

Threat actors love a wild policy NiceNic has which requires 3rd parties to have a “Power of Attorney” over any brands that are mentioned on malicious infrastructure being reported by that 3rd party. So to get a network down that impersonates dozens of brands, it would require dozens of POAs...

Bulletproof Registrar NiceNic is given some special attention... oh what's that, you've never heard of a Bulletproof Registrar? Well what happens if you combine a BPH + a BPR? ⚖️📴

If you don’t know about NiceNic, you’re way behind the threat actors...

Reminder, CISA + NSA + FBI + DOD + international law enforcement wrote about the threat of Bulletproof Hosting Providers last month and included details about Infrastructure Laundering from FUNNULL in their report:

www.cisa.gov/resources-to...

This is the *newest form of Bulletproof Hosting*

FUNNULL is illicitly acquiring IPs and mapping them into their network in order to make their network faster for U.S. victims connecting to their scam websites and likely saving money by doing this.

This is the dance that FUNNULL admins do when they steal western IPs without ramifications.

Infrastructure Laundering from FUNNULL CDN & Triad Nexus is the newest and nastiest form of bulletproof hosting, where this network uses “account mules” to illicitly acquire IPs from major cloud providers like Amazon, Microsoft, Cloudflare and Google...

BPH’s get online through “peering agreements” w/ other ASNs. In the white paper we’re using the free data from Hurricane Electric to explain why folks really need to be more focused on peering relationships. If you find a BPH, how are they getting online & who are their ASN peers? We need more:

You’ll see plenty of references to The Spamhaus Project 💌 , the long-term gold-standard for tracking BPH’s with their Don't Route Or Peer Lists (DROP). We’ve never found a false positive on their list, but we’ve found their drop list does NOT cover all ASNs we consider BPHs. (examples shared!)👀

This report was a monster to get over the finish line. We “name names” and show how the technical sausage is made.

Two decades ago, there was really only one BPH – the Russian Business Network (RBN) operated out of Moscow, being the internet honeybadger of crime. But since then this illicit business model has exploded in popularity. We're tracking over 100 ASNs operating as BPH's right now...w/ more every month!

BPH’s host malware delivery infrastructure & C2s, phishing sites & financial fraud campaigns, money laundering infrastructure, websites conducting ad fraud & various types of illicit CPA/locker/redirect campaigns, CSAM, and every other horrible thing you can think of that exists on the internet. 🌩️

BPH’s are the front door, side door, & the back screen door hanging off the hinges for some of the most serious cybercrime campaigns. These hosting providers *ignore legitimate abuse complaints* which ensures that malicious campaigns, even after they are identified & reported, keep humming along. 🤕

We found the bug in how Vetco generates PDF documents for its customers. Its PDF page was public and was indexed by Google, which is how we found it. Worse, an IDOR bug in the URL meant it was possible for anyone to obtain customer data by changing the customer's unique ID by a single digit. 🤦

just use TOR Browser if looking for that level of obfuscation imo 🖖

This is a really interesting development and if FF is able to grow market share with this feature, it could encourage other browsers to try and find a way to make theirs free too.

All that being said, FF really struggles with *making money* so it does still worry me when they start handing $$ out.

Brave browser also doesn't have a free VPN, in-fact I don't know of any credible* browsers with free VPNs built in currently. Even Apple's iCloud Private Relay costs money.

*Opera Browser has a free VPN but the browser is owned by a Chinese consortium and I wouldn't trust it at all.