Bright Data offers a “free” VPN service; all that is needed is for the user to give Bright Data the ability to route traffic through the user’s device — to become a part of the company’s residential-proxy network, in other words. Every phone or other device that makes use of this VPN becomes yet another endpoint that will be used to attack web sites.