Silent Push has released new research revealing how legitimate bandwidth-sharing apps can quietly turn employee devices into commercial proxy nodes, potentially exposing corporate IP addresses and internal network resources to anyone with access to the proxy service.
Silent Push researchers joined Peer2Profit, a bandwidth-sharing service that pays users to share their internet connection, and traced where that bandwidth actually goes. Within roughly 10 minutes of enrolling a test device, its residential IP appeared in Astroproxy’s commercial proxy network, confirming an active operational relationship between the two services. Peer2Profit recruits users and pays for their bandwidth, while Astroproxy resells that bandwidth commercially.
The findings expose a significant blind spot for enterprise security teams: Peer2Profit is not malware and can be knowingly installed through legitimate channels, meaning traditional antivirus and threat intelligence tools may not flag it. Once installed on a corporate device or network, however, the organization’s IP can become a proxy exit node, and Silent Push found the risk can extend beyond the public IP to internal network resources.
You can read the blog here:https://www.silentpush.com/blog/peer2profit-astroproxy/
Related
This entry was posted on August 20, 2026 at 8:05 am and is filed under Commentary with tags Silent Push. You can follow any responses to this entry through the RSS 2.0 feed.
You can leave a response, or trackback from your own site.
New Research Finds Legitimate Bandwidth-Sharing App Can Expose Corporate Networks to Proxy Users
Silent Push has released new research revealing how legitimate bandwidth-sharing apps can quietly turn employee devices into commercial proxy nodes, potentially exposing corporate IP addresses and internal network resources to anyone with access to the proxy service.
Silent Push researchers joined Peer2Profit, a bandwidth-sharing service that pays users to share their internet connection, and traced where that bandwidth actually goes. Within roughly 10 minutes of enrolling a test device, its residential IP appeared in Astroproxy’s commercial proxy network, confirming an active operational relationship between the two services. Peer2Profit recruits users and pays for their bandwidth, while Astroproxy resells that bandwidth commercially.
The findings expose a significant blind spot for enterprise security teams: Peer2Profit is not malware and can be knowingly installed through legitimate channels, meaning traditional antivirus and threat intelligence tools may not flag it. Once installed on a corporate device or network, however, the organization’s IP can become a proxy exit node, and Silent Push found the risk can extend beyond the public IP to internal network resources.
You can read the blog here:https://www.silentpush.com/blog/peer2profit-astroproxy/
Share this:
Like this:
Related
This entry was posted on August 20, 2026 at 8:05 am and is filed under Commentary with tags Silent Push. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.