← Back to feed
Threat Actors & CampaignsEmerging1 sourceAug 20, 2026 · 10:10via Malware.news

New Research: How Peer2Profit and Astroproxy Turn Your Bandwidth Into Someone Else's Product

Brief

We joined a bandwidth-sharing network to see what actually happens to your IP address. The answer should worry every security team that assumes “not malware” means “not a risk.”

Key Findings

Residential proxies are almost invisible to security teams, yet they can expose organizations’ valuable internal resources to anyone with a proxy subscription.

PEER2PROFIT directly feeds ASTROPROXY. Silent Push confirmed an active, operational relationship between the two: PEER2PROFIT recruits everyday users and pays them for bandwidth, while ASTROPROXY resells that bandwidth commercially, at up to 27 times what the user was paid.

The scale is larger than a niche side-hustle app would suggest. Over a 72-hour enumeration window, we identified 117,224 unique IPs across ASTROPROXY’s residential, mobile, and datacenter pools, with the residential pool alone adding over 1,000 new IPs every hour.

Read more on Malware.news