Open source research and talks on threat intelligence, fingerprinting, and fraud detection.

• 10/25/2024 - Anti-Fraud W3 Community Group - An Emprical Analysis of Residential Proxies
• 03/27/2025 - Anti-Fraud W3 Community Group - Mitigating Fingerprint Impersonation
• 10/23/2025 - [TLP:AMBER] Anti-Fraud W3 Community Group - Residential Proxy Landscape 2025
• 04/07/2026 - [TLP:AMBER] M3AAWG - The Botnet Ecosystem Powering Residential Proxies

• 09/09/2025 - Announcing the Synthient IP Risk Database
• 09/30/2025 - GhostSocks: From Initial Access to Residential Proxy
• 10/21/2025 - The Stealer Log Ecosystem: Processing Millions of Credentials a Day
• 12/02/2025 - IPCola: A Tangled Mess
• 01/02/2026 - A Broken System Fueling Botnets
• 03/30/2026 - ProxyBox: Socks5Systemz Lives On
• 06/09/2026 - Who are the victims of residential proxies?
• 06/19/2026 - Popa from Sourcing to Distribution

• 10/22/2025 - Inside the Synthient Threat Data
• 10/29/2025 - Aisuru Botnet Shifts from DDoS to Residential Proxies
• 01/02/2026 - The Kimwolf Botnet is Stalking Your Local Network
• 04/07/2026 - From DDoS to Residential Proxies: The Shifting Botnet Threat Keeping M3AAWG on High Alert
• 06/18/2026 - ‘Popa’ Botnet Linked to Publicly-Traded Israeli Firm