# SOCKS5

Published articles for SOCKS5.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## Attackers Expose Ongoing AI Tool Use Targeting Organizations in Latin America

DevFeed: [Attackers Expose Ongoing AI Tool Use Targeting Organizations in Latin America](<https://devfeed.tech/articles/attackers-expose-ongoing-ai-tool-use-targeting-organizations-in-latin-america-7747.md>)

Original publisher: [Read original article](<https://unit42.paloaltonetworks.com/ai-tool-use-targeting-latam-orgs/>)

Author: Reese Lewis and Sara McBroom

Published: 2026-09-03T10:00:58Z

Content type: article

Language: en

Sources: [Unit 42](<https://devfeed.tech/sources/unit-42.md>)

Topics: [Language models](<https://devfeed.tech/topics/language-models.md>), [AI Chat](<https://devfeed.tech/topics/ai-chat.md>), [Incident response](<https://devfeed.tech/topics/incident-response.md>)

Tags: [agentic-ai](<https://devfeed.tech/tags/agentic-ai.md>), [ai](<https://devfeed.tech/tags/ai.md>), [chatgpt](<https://devfeed.tech/tags/chatgpt.md>), [cl-cri-1131](<https://devfeed.tech/tags/cl-cri-1131.md>), [cl-cri-1163](<https://devfeed.tech/tags/cl-cri-1163.md>), [claude-code](<https://devfeed.tech/tags/claude-code.md>), [data](<https://devfeed.tech/tags/data.md>), [financial-sector](<https://devfeed.tech/tags/financial-sector.md>), [go](<https://devfeed.tech/tags/go.md>), [large-language-models-llms](<https://devfeed.tech/tags/large-language-models-llms.md>), [malware](<https://devfeed.tech/tags/malware.md>), [nextchat](<https://devfeed.tech/tags/nextchat.md>), [operations](<https://devfeed.tech/tags/operations.md>), [phishing](<https://devfeed.tech/tags/phishing.md>), [shipping-and-transportation](<https://devfeed.tech/tags/shipping-and-transportation.md>), [socks5](<https://devfeed.tech/tags/socks5.md>), [socktz](<https://devfeed.tech/tags/socktz.md>), [threat-research](<https://devfeed.tech/tags/threat-research.md>)

### AI overview

The article examines two ongoing intrusion and data-exfiltration campaigns targeting organizations in Latin America. It describes attackers using commercial large language models, proxy infrastructure, phishing, remote-access malware, and operational tooling.

### Source excerpt

Explore how attackers targeting Latin American entities use AI for data exfiltration and how basic OpSec errors allow defenders to disrupt operations. The post Attackers Expose Ongoing AI Tool Use Targeting Organizations in Latin America appeared first on Unit 42.

## pproxy: a forward proxy that load-balances a pool of upstream proxies

DevFeed: [pproxy: a forward proxy that load-balances a pool of upstream proxies](<https://devfeed.tech/articles/pproxy-a-forward-proxy-that-load-balances-a-pool-of-upstream-proxies-34032.md>)

Original publisher: [Read original article](<https://andikaahmad.com/blog/pproxy/>)

Published: 2026-06-22T00:00:00Z

Content type: article

Language: en

Sources: [Andika Ahmad Ramadhan -- Blog](<https://devfeed.tech/sources/andika-ahmad-ramadhan-blog.md>)

Topics: [proxy](<https://devfeed.tech/topics/proxy.md>), [client](<https://devfeed.tech/topics/client.md>), [health checks](<https://devfeed.tech/topics/health-checks.md>), [HTTP](<https://devfeed.tech/topics/http.md>)

Tags: [client](<https://devfeed.tech/tags/client.md>), [health](<https://devfeed.tech/tags/health.md>), [health-checks](<https://devfeed.tech/tags/health-checks.md>), [http](<https://devfeed.tech/tags/http.md>), [prometheus](<https://devfeed.tech/tags/prometheus.md>), [proxy](<https://devfeed.tech/tags/proxy.md>), [reload](<https://devfeed.tech/tags/reload.md>), [round-robin](<https://devfeed.tech/tags/round-robin.md>), [socks5](<https://devfeed.tech/tags/socks5.md>), [tls](<https://devfeed.tech/tags/tls.md>)

### AI overview

This article presents pproxy, a forward proxy that distributes client traffic across upstream proxies. It describes active health checks, round-robin selection, failover within requests, hot configuration reloads, per-user authentication, and Prometheus metrics.

### Source excerpt

pproxy is a forward proxy that load-balances client traffic across a pool of upstream proxies with active health checks and hot config reload, so switching proxy providers means editing one config file instead of every client.

## MuddyWater: Snakes by the riverbank

DevFeed: [MuddyWater: Snakes by the riverbank](<https://devfeed.tech/articles/muddywater-snakes-by-the-riverbank-8376.md>)

Original publisher: [Read original article](<https://www.welivesecurity.com/en/eset-research/muddywater-snakes-riverbank/>)

Author: ESET Research

Published: 2025-12-02T10:00:15Z

Content type: article

Language: en

Sources: [WeLiveSecurity](<https://devfeed.tech/sources/welivesecurity.md>)

Topics: [backdoor](<https://devfeed.tech/topics/backdoor.md>), [C++](<https://devfeed.tech/topics/c-plus-plus.md>)

Tags: [analysis](<https://devfeed.tech/tags/analysis.md>), [api](<https://devfeed.tech/tags/api.md>), [apt](<https://devfeed.tech/tags/apt.md>), [backdoor](<https://devfeed.tech/tags/backdoor.md>), [c](<https://devfeed.tech/tags/c.md>), [c-c-plus-plus](<https://devfeed.tech/tags/c-c-plus-plus.md>), [c-plus-plus](<https://devfeed.tech/tags/c-plus-plus.md>), [critical-infrastructure](<https://devfeed.tech/tags/critical-infrastructure.md>), [cryptographic](<https://devfeed.tech/tags/cryptographic.md>), [eset-research](<https://devfeed.tech/tags/eset-research.md>), [iran](<https://devfeed.tech/tags/iran.md>), [malware](<https://devfeed.tech/tags/malware.md>), [memory](<https://devfeed.tech/tags/memory.md>), [persistence](<https://devfeed.tech/tags/persistence.md>), [socks5](<https://devfeed.tech/tags/socks5.md>), [techniques](<https://devfeed.tech/tags/techniques.md>), [tools](<https://devfeed.tech/tags/tools.md>), [windows](<https://devfeed.tech/tags/windows.md>)

### AI overview

ESET analyzes a MuddyWater campaign targeting organizations in Israel and Egypt that uses custom loaders, credential stealers, reverse tunnels, and the MuddyViper backdoor to evade defenses and maintain access.

### Source excerpt

MuddyWater targets critical infrastructure in Israel and Egypt, relying on custom malware, improved tactics, and a predictable playbook

## Apollo's Response to CVE-2023-38545

DevFeed: [Apollo's Response to CVE-2023-38545](<https://devfeed.tech/articles/apollo-s-response-to-cve-2023-38545-23227.md>)

Original publisher: [Read original article](<https://www.apollographql.com/blog/apollos-response-to-cve-2023-38545>)

Author: Matt Peake

Published: 2023-10-09T14:59:26Z

Content type: release

Language: en

Sources: [Apollo Blog](<https://devfeed.tech/sources/apollo-blog.md>)

Topics: [vulnerability](<https://devfeed.tech/topics/vulnerability.md>), [apollo-client](<https://devfeed.tech/topics/apollo-client.md>), [apollo-server](<https://devfeed.tech/topics/apollo-server.md>), [GraphOS](<https://devfeed.tech/topics/graphos.md>), [Microservices](<https://devfeed.tech/topics/microservices.md>), [iOS](<https://devfeed.tech/topics/ios.md>), [Kotlin](<https://devfeed.tech/topics/kotlin.md>)

Tags: [apollo](<https://devfeed.tech/tags/apollo.md>), [apollo-client](<https://devfeed.tech/tags/apollo-client.md>), [cve](<https://devfeed.tech/tags/cve.md>), [graphos](<https://devfeed.tech/tags/graphos.md>), [graphql](<https://devfeed.tech/tags/graphql.md>), [ios](<https://devfeed.tech/tags/ios.md>), [kotlin](<https://devfeed.tech/tags/kotlin.md>), [microservices](<https://devfeed.tech/tags/microservices.md>), [security](<https://devfeed.tech/tags/security.md>), [socks5](<https://devfeed.tech/tags/socks5.md>), [vulnerability](<https://devfeed.tech/tags/vulnerability.md>), [vulnerability-management](<https://devfeed.tech/tags/vulnerability-management.md>)

### AI overview

Apollo reports that Apollo Router, Apollo Client, Apollo Server, Apollo Kotlin, Apollo iOS, and Rover are not affected by CVE-2023-38545. GraphOS includes containers with affected curl versions, but Apollo says it does not use SOCKS5 proxies in the GraphOS environment, a key requirement for exploiting the vulnerability.

### Source excerpt

October 12, 2023 Update Yesterday, the curl project released details regarding CVE-2023-38545. We want to provide an update on Apollo's impact from this vulnerability. As mentioned in our original post, Apollo Router, Apollo Client, Apollo Server, Apollo Kotlin, Apollo iOS, and Rover do not rely on curl and are not affected by this vulnerability. The build processes for these projects do utilize curl, but exclusively communicate with trusted domains and are therefore not impacted.

## Android Password Store October release

DevFeed: [Android Password Store October release](<https://devfeed.tech/articles/android-password-store-october-release-38525.md>)

Original publisher: [Read original article](<https://msfjarvis.dev/posts/aps-october-release/>)

Author: Harsh Shandilya

Published: 2020-10-22T06:30:00Z

Content type: release

Language: en

Sources: [Posts on Harsh Shandilya](<https://devfeed.tech/sources/posts-on-harsh-shandilya.md>)

Topics: [Android](<https://devfeed.tech/topics/android.md>), [Release notes](<https://devfeed.tech/topics/release-notes.md>), [releases](<https://devfeed.tech/topics/releases.md>), [App](<https://devfeed.tech/topics/app.md>), [passwords](<https://devfeed.tech/topics/passwords.md>), [Git](<https://devfeed.tech/topics/git.md>), [proxy](<https://devfeed.tech/topics/proxy.md>)

Tags: [android](<https://devfeed.tech/tags/android.md>), [android-password-store](<https://devfeed.tech/tags/android-password-store.md>), [bug](<https://devfeed.tech/tags/bug.md>), [feature](<https://devfeed.tech/tags/feature.md>), [git](<https://devfeed.tech/tags/git.md>), [improvements](<https://devfeed.tech/tags/improvements.md>), [oss](<https://devfeed.tech/tags/oss.md>), [proxy](<https://devfeed.tech/tags/proxy.md>), [release](<https://devfeed.tech/tags/release.md>), [release-notes](<https://devfeed.tech/tags/release-notes.md>), [relnotes](<https://devfeed.tech/tags/relnotes.md>), [socks5](<https://devfeed.tech/tags/socks5.md>), [sync](<https://devfeed.tech/tags/sync.md>)

### AI overview

The Android Password Store October release adds GPG key selection during onboarding, HTTPS proxy configuration, and an option to sync the repository on launch. It also improves connection error messages and restores Git's default user and email behavior when no identity is configured. Automatic sync was rolled back in v1.13.1 because of multiple bugs.

### Source excerpt

Long form release notes for the Android Password Store October release