Huntress Highlights Business Risks Tied to VPNs and Proxy Services
Summary
Huntress reviews VPN and proxy services it says appear in business identity incidents, citing anonymity features, payment options and observed misuse. It recommends Managed ITDR rules to flag expected or unauthorized VPNs.
Key points
- Huntress says NordVPN accounts for about 20% of the VPN-related incidents it observes, involving legitimate use, policy violations and cybercrime.
- The article names NordVPN, Mullvad, Meson.Network Proxy, IPRoyal Proxy and HideMyAss as services with features or observed use that may create business security risks.
- Huntress says it rarely, if ever, sees legitimate small- and medium-sized business use of Meson.Network’s decentralized proxy network.
- The article says IPRoyal’s residential proxies and location targeting could help attackers make traffic appear closer to a victim’s location and evade identity-provider scrutiny.
- After a court order in 2012, HideMyAss provided law enforcement details related to the LulzSec Sony hacking incident; the article says the provider later adopted a no-logging policy.
- The article notes Tor’s legitimate privacy uses, including for journalism and work in political environments, while cautioning against unnecessary use for routine business activity.
- Huntress says businesses can create Managed ITDR rules to classify VPNs as expected or unauthorized.
Article Details
- Topic
- Cybersecurity risks associated with VPNs and proxy services commonly used by businesses
People
Vendors
HideMyAssHideMyAss (HMA) VPNHuntressWith Huntress Managed Identity Threat Detection and Response (ITDR), we've uncovered a lineup of VPNs and proxies that businesses commonly use but come with more risks than rewards. Think more coal than cookies. FromIPRoyalIPRoyal Proxy Meson.NetworkMeson.Network ProxyMullvadMullvad VPNNordVPNHomeBlogMommy, Does Santa Like NordVPN?
Products
IPRoyal ProxyWhy it’s on the Naughty List: IPRoyal Proxy makes the list because of its focus on residential proxies and granular location targeting—combined with its acceptance of over 70 cryptocurrencies—which provideManaged ITDRVPNs and proxies deserve a place on Santa’s Naughty List this year? Since releasing Unwanted Access—Managed ITDR’s capability that combats pervasive threats like session hijacking and credential theft—we’ve noticedMeson.Network ProxyWhy it’s on the Naughty List: Meson.Network Proxy deserves its spot on the list because its decentralized, crypto-powered bandwidth-trading model creates an untraceable playground for cybercriminals to mask maliciousMullvad VPNLike NordVPN, Mullvad VPN offers the no-logging, kill switch, and privacy-first vibe. And they’re hyping “quantum-computing resistant tunnels,” which, frankly, we’re still trying to wrap our heads around. NordVPNHomeBlogMommy, Does Santa Like NordVPN?