Listen to this Post
The Silent Rise of a Digital Army
In one of the most alarming developments of 2025, cybersecurity researchers at XLab have uncovered a vast and stealthy expansion of the PolarEdge botnet, now encompassing more than 25,000 infected devices and 140 command-and-control servers across 40 countries. What began as a localized IoT infection has evolved into a full-fledged global cyber proxy network, silently turning security cameras, routers, and DVRs into digital mercenaries for cybercriminals.
The discovery originated from a single mysterious file named “w”, detected on May 30, 2025, by XLab’s Cyber Threat Insight and Analysis System. Initially dismissed as harmless due to its zero detections on VirusTotal, the file’s clean appearance hid something far more dangerous — a new stealth component known as RPX_Client, capable of converting IoT devices into encrypted proxy nodes for criminal operations. This revelation unveiled the emergence of a sophisticated and highly distributed network architecture that cybersecurity experts now call Operational Relay Box (ORB) infrastructure.
The Discovery That Changed Everything
When XLab researchers traced the source of the file back to the IP address 111.119.223.196, they launched a deep correlation analysis. What followed was a detailed breakdown of the RPX_Client module, which exposed how PolarEdge has transformed from a traditional botnet into a multi-layered anonymity system for illicit online traffic. The RPX_Client component acts as the digital glue between infected IoT devices and high-performance VPS-based servers, creating a two-tier relay system nearly impossible to trace.
Global Scale and Primary Targets
According to XLab’s report, South Korea has been the hardest hit, representing 41.
Something went wrong while generating the response. If this issue persists please contact us through our help center at help.openai.com.
Retry
🕵️📝✔️Let’s dive deep and fact‑check.
References:
Reported By: cyberpress.org
Extra Source Hub (Possible Sources for article):
https://www.github.com
Wikipedia
OpenAi & Undercode AI
Image Source:
Unsplash
Undercode AI DI v2
Bing
🔐JOIN OUR CYBER WORLD [ CVE News • HackMonitor • UndercodeNews ]
📢 Follow UndercodeNews & Stay Tuned:
𝕏 formerly Twitter 🐦 | @ Threads | 🔗 Linkedin | 🦋BlueSky | 🐘Mastodon
