ThreatPaper
Unverified

Proxy resellers like VPN Pure knowingly sourced IPs from a criminal brute-forcing operation

Assessment

The exposed server's leaked distribution-channel data confirms that LeakySensey resold compromised proxy access to platforms including VPN Pure, Pure Connect, Rich Proxy, Opm Proxy, For Friends, and SkySocks. Cybernews' own researcher, Aras Nazarovas, frames this as raising "serious concerns over the ethics regarding how some providers source their proxy endpoints" — a question, not a settled conclusion. No source establishes whether these platforms had actual knowledge that the IPs they purchased originated from brute-forced consumer and business devices, as opposed to believing they were buying from a legitimate residential-proxy aggregator, which is common in that industry and does not itself imply awareness of the underlying compromise.

Where this claim appeared

Cybernews · 2026-09-17

https://cybernews.com/security/russian-vpn-hacker-brute-forcing-routers-building-proxy-empire/

What “Unverified” means

Widely repeated, but no supporting evidence was located. This is not a statement that the claim is false — it is a statement that nothing published supports it, which is a different and more common problem.

2 of 5 · rating scale

Assessed in

LeakySensey: Solo Russian Hacker Built a $200K Proxy Empire by Brute-Forcing 87,000 Legacy VPN Devices

Think this assessment is wrong? Report an error.