Socket finds 737 VPN and proxy add-ons funneling browser sessions through a single provider.
The campaign leverages Showboat Linux malware and JMFBackdoor Windows implant for long term espionage against telecom networks.