Ben

> be chinese financially motivated threat actor > create big ass fuck off botnet > botnet transforms machines into proxies > sell proxies on IPweb > make big money > millions of dollars > accidentally push source code of botnet to GitHub > accidentally push source code of botnet to GitHub > @synthient finds it > hello mr synthient can i have the goop code? > "sure?" > gives > download it thank you mysterious group of chinese people for accidentally uploading your botnet code to github. i have goop code now

Chinese-speaking proxy services are often grouped together as belonging to IPIDEA or Kookeey. In reality, the ecosystem is incredibly diverse and includes a number of custom botnets. This report focuses on one of those providers: IPWeb.