Industrial-scale SIM farm-as-a-service operation uncovered

Belarus-based software platform ProxySmart has been leveraged to power 87 physical SIM farms around the world as part of an industrial-scale cybercrime operation, according to Infosecurity Magazine.

With a web-based control panel, API, and remote access supporting SIM farm-as-a-service, ProxySmart enables device management, customer provisioning, automated IP rotation, network fingerprint spoofing, and plan enforcement, while ensuring countermeasures against bots, reported Infrawatch researchers.

"Infrawatch assesses this ecosystem materially lowers the barrier to operating and reselling mobile proxy infrastructure, with limited evidence of meaningful eligibility checks across many downstream providers. The combination of carrier-grade NAT, rapid IP rotation, and multi-carrier availability reduces the effectiveness of IP-centric controls and complicates attribution at scale," said the report.

However, such findings were disputed by ProxySmart, which touted itself as a data path proxy management layer.

"The infrastructure underpins legitimate work across advertising verification, brand protection, cybersecurity research, fraud-detection model training, and application QA, alongside the downstream providers visible on the public internet," said Proxysmart technical consultant and PR lead Alex Zak.