[syntheticcorp]

If an attacker compromises your machine and steals your password they can also just route their traffic through it, meaning the IP would match the regular one seen by the Ring servers

[spydum]

Yes they can, but what we often see is accounts sold off to others. They don't give away their infected machine. They just harvest credentials.