Prosecutor release

# Authorities Dismantle Global Malicious Proxy Service that Deployed Malware and Defrauded Thousands of U.S. Persons, Businesses, and Financial Institutions of Millions of Dollars in Losses

U.S. Attorney's Office, Eastern District of California, March 12, 2026. Establishes the seizure of dozens of SocksEscort domains..

**Source type:** Prosecutor release

**Published:** March 12, 2026

**Research grade:** P1

**Used in entries:** 7

## Bibliographic record

**Publisher:** U.S. Attorney's Office, Eastern District of California

**Published:** March 12, 2026

**Source type:** Prosecutor release

**Research grade:** Source grade P1

**Language:** English

**Official record:** Official publication

**Address:** [https://www.justice.gov/usao-edca/pr/authorities-dismantle-global-malicious-proxy-service-deployed-malware-and-defrauded](https://www.justice.gov/usao-edca/pr/authorities-dismantle-global-malicious-proxy-service-deployed-malware-and-defrauded)

**What it supports:** Establishes the seizure of dozens of SocksEscort domains.

**Dataset id:** src\_doj\_socksescort\_2026

How this source is used

Cited 7 times across 3 record types.

The role on each citation records what the source was relied on for. A primary source establishes the fact, a supporting source corroborates it, technical evidence describes the infrastructure, and a later outcome records what happened afterwards.

Sources were reviewed to a research cutoff of August 23, 2026. Addresses recorded after that date are not reflected here.

## Cited by

### Takedown records

1 citation

Cited on the takedown record itself.

-
[SocksEscort proxy network disruption](https://takedownindex.org/takedowns/socksescort-proxy-network-disruption)

Criminal hosting and proxies, March 2026

Primary source

### Organization roles

4 citations

Cited for an organization's recorded role in a takedown.

-
[Federal Bureau of Investigation](https://takedownindex.org/takedowns/socksescort-proxy-network-disruption)

Investigating, SocksEscort proxy network disruption

Primary source
-
[Lumen Technologies Black Lotus Labs](https://takedownindex.org/takedowns/socksescort-proxy-network-disruption)

Technical partner, SocksEscort proxy network disruption

Primary source
-
[European Union Agency for Law Enforcement Cooperation](https://takedownindex.org/takedowns/socksescort-proxy-network-disruption)

Coordinator, SocksEscort proxy network disruption

Primary source
-
[United States Department of Justice](https://takedownindex.org/takedowns/socksescort-proxy-network-disruption)

Operational lead, SocksEscort proxy network disruption

Primary source

### Infrastructure

2 citations

Cited for infrastructure recorded as acted on.

-
[34 domains](https://takedownindex.org/takedowns/socksescort-proxy-network-disruption)

Domains seized, SocksEscort proxy network disruption

Primary source
-
[23 servers](https://takedownindex.org/takedowns/socksescort-proxy-network-disruption)

Servers seized, SocksEscort proxy network disruption

Primary source

[All sources](https://takedownindex.org/sources)