Botnets are a significant concern for organizations because they are frequently used by threat actors for various malicious purposes. These networks of compromised devices can persist even if one device is detected and removed, allowing attackers to continue their operations. One recent example is the Socks5Systemz botnet, which operates as a proxy-for-rent service. It has infected thousands of devices worldwide, with a high concentration in India. Darktrace's Cyber AI Analyst played a crucial role in identifying and investigating the activities of Socks5Systemz, enabling customers to respond effectively to the threat.