
Russian exiled media Meduza.io facing repeated DDoS attacks
Meduza is one of the largest and most influential Russian regime critical news site that delivers daily news from all across Russia in Russian and English languages. Meduza operates in exile from its headquarters in Riga, Latvia where most of its newsroom is located. In January 2023, Russia’s General Prosecutor’s Office declared Meduza undesirable in the […]

Monetization of hacked Facebook pages: Money to earn for everyone!
7 February 2024 Hacked Facebook pages is no news, millions of accounts are compromised every year. But what are they used for, and who monetizes on those accounts being hacked? Qurium’s investigation starts with a handful of hacked Facebook pages belonging to the Ugandan media group “Nation Media Group” which have been used to drive […]

Adsterra used to promote malicious content using hacked Facebook pages
The Nation Media Group is the largest independent media house in East and Central Africa with operations in print, broadcast and digital media serving audiences in Kenya, Uganda, Tanzania and Rwanda. Since mid November 2023, a number of Facebook Reels and Posts associated to media brands owned by Nation Media Group have been used to […]

Proxy providers weaponized to launch denial of service attack against Rappler
On 30th of October (10:51am UTC), the Philippine news site Rappler received more than 40 Million requests to the their home page during less than one hour. Rappler is the Philippines’ leading digital media company that is driven by uncompromising journalism, founded by 2021 Nobel Peace Prize laureate Maria Ressa in 2012. The goal of […]

DDoS attacks against Hungarian media traced to proxy infrastructure “White Proxies”
– Attacks enabled by a stack of rotten actors During April- August 2023, more than 40 Hungarian media websites were targeted by waves of denial of service attacks which brought many of them offline. Nearly all of the targeted news sites had one thing in common – they were critical of the government of Prime […]

Rayobyte infrastructure enabling DDoS attacks
– Denial of service against Somali Journalists Syndicate launched from Sprious Group’s proxy infrastructure This forensic report is yet another example on how the self-proclaimed “ethical proxy services” are used to launch large and complex DDoS attacks to silence media outlets. With large pools of valid IP addresses from all over the world, residential and […]

The tip of the iceberg – the algorithm fraud industry
This report is the result of a six months long investigation, tracing and uncover a large network of Vietnamese fraudsters that uses Facebook infrastructure and residential proxies to build and control large Facebook bots, that are used to monetize on Facebook services or carry out malicious activities.
