PacketStream

Evidence

1. AppEsteem listed PacketStream Inc's Windows app (two versions) and macOS app as Deceptors on 29 Jan 2025, among other findings for consent and disclosure failures around sharing the network connection; on 23 Oct 2026 no fix was recorded.

   Supply and public reports High confidence Seen 23 Oct 2026 customer.appesteem.com

2. PacketStream's Terms of Service and privacy policy (both last updated 6 Oct 2026) named PacketStream Inc. as the provider; its code-signing certificate, per AppEsteem's data, gave Los Angeles, California.

   “These Terms of Service (“Terms”) are an agreement between you and PacketStream Inc.”

   Web and company links High confidence Seen 23 Oct 2026 packetstream.io

3. PacketStream's Terms described a peer-to-peer residential network to which account holders contribute bandwidth through its Packeter desktop client for Windows, macOS or Linux, carrying customer and PacketStream traffic, credited at $0.10 per GB.

   “The Packeter desktop client allows an account holder (“Packeter”) to contribute bandwidth from a Windows, macOS, or Linux device.”

   Supply and public reports High confidence Seen 23 Oct 2026 packetstream.io

4. PacketStream's homepage described every exit as a real home paid to share its connection.

   “Every exit is a real home, paid to share.”

   Supply and public reports High confidence Seen 23 Oct 2026 packetstream.io

5. AhnLab's ASEC reported that the Larva-24011 actor, which targets poorly managed IIS, Tomcat and MS-SQL servers, installed proxyware tools including PacketStream, Traffmonetizer, IPRoyal and Proxyrack on systems it had compromised.

   “installs the launcher malware “warpstrat.dll” along with proxyware tools such as Traffmonetizer, IPRoyal, Proxyrack, and PacketStream”

   Supply and public reports High confidence Seen 23 Oct 2026 asec.ahnlab.com

6. PacketStream's Terms described a white-label service, open to approved partners with a $500 minimum, through which they sell access to its network under their own brand without PacketStream branding.

   “PacketStream does not expose PacketStream branding to a reseller’s end customers through the white-label service.”

   Web and company links High confidence Seen 23 Oct 2026 packetstream.io

7. Synthient's PacketStream profile named HydraProxy, TorchProxies and WiredProxies among "proxy resellers" it found "to be providing access to PacketStream".

   “Synthient's Research Team has found proxy resellers such as HydraProxy, TorchProxies, and WiredProxies”

   Supply and public reports Medium confidence Seen 23 Oct 2026 synthient.com

8. AhnLab's ASEC reported that the attackers behind LoveMiner, who break into poorly managed MS-SQL servers, had switched to installing proxyware from PacketStream, IPRoyal Pawns, Traffmonetizer and Proxyrack on those servers.

   “they have now shifted to employing proxyware from IPRoyal Pawns, Traffmonetizer, Proxyrack, and PacketStream companies”

   Supply and public reports High confidence Seen 23 Oct 2026 asec.ahnlab.com

9. Proxyway's 2022 proxyware research said PacketStream and IPRoyal both rely on bandwidth sharers and supply proxies to other proxy providers; it named no buyers.

   “PacketStream and IPRoyal rely on bandwidth sharers. Their IP numbers aren’t that high, and both companies further resell proxies to other proxy providers.”

   Supply and public reports Medium confidence Seen 23 Oct 2026 proxyway.com

10. Trend Micro named PacketStream among bandwidth-sharing apps and, from exit-node traffic it recorded from January to September 2022, listed PacketStream among networks carrying SMS-verification service access, SQL injection probing and /etc/passwd scans.

    “Some examples of companies using the “network bandwidth sharing” monetization scheme include HoneyGain, TraffMonitizer, Peer2Profit, PacketStream, and IPRoyal Pawns, among others.”

    Supply and public reports High confidence Seen 23 Oct 2026 trendmicro.com

11. Synthient's provider index (Wayback capture of 14 May 2026) listed PacketStream with 1,010,230 IPs and a separate pool named "Wired Packet" with 477,902 IPs.

    “Wired Packet 477,902 IPs”

    Supply and public reports Medium confidence Seen 23 Oct 2026 web.archive.org

12. Trend Micro's 2023 residential proxy paper listed PacketStream among the seven most-marketed proxyware apps it identified.

    “IPRoyal Pawns, PacketStream, EarnApp (a Luminati app), Peer2Profit, Income by Spider, and Traffmonetizer”

    Supply and public reports High confidence Seen 23 Oct 2026 trendaisecurity.com

13. Synthient's PacketStream profile said PacketStream sources IPs through its own client and gave it a LOW risk score based on a randomized sample of consent practices.

    “PacketStream is observed leveraging its PacketStream client to obtain large swaths of IP addresses.”

    Supply and public reports High confidence Seen 23 Oct 2026 synthient.com

Includes information from AppEsteem’s Deceptor list as it stood on 23 Oct 2026, restated in our own words without changing its findings, and used under AppEsteem’s Terms of Use.