International law enforcement agencies have dismantled a global cybercrime infrastructure known as the Operation Lightning, targeting the proxy service, SocksEscort, which allowed criminals to route internet traffic through infected routers around the world to hide their identities.

The operation was coordinated by Europol with support from authorities in the United States and several European countries, including Austria, France, the Netherlands, Bulgaria, Germany, Hungary and Romania. Judicial coordination was handled by Eurojust.

Investigators found that SocksEscort operated a large proxy network built from compromised routers and internet-connected devices. Malware infected modems belonging to individuals…