
978: House of Trolls
Russian IP Addresses and VPN Usage in Cyber Investigations
The use of Russian IP addresses as a primary signal for identifying "malicious actors" is criticized as an unreliable investigative method. Because VPNs allow users to spoof their location, an actor in any country could appear to be in Russia. Recent crackdowns by the Russian government on VPN vendors have limited the availability of high-speed Russian servers previously used by various online entities.

