logo

Law enforcememt operation disrupted Malicious Residential Proxy Networks NetNut

ID: b331e5ed-a82f-5751-b997-aad870c911eb

STIX ID: report--b331e5ed-a82f-5751-b997-aad870c911eb

Feed Name: Security Affairs

Threat Score
75/100

Date Published: 2026-07-03

Date Updated: 2026-07-03

Author: Pierluigi Paganini

...
...

Google, in coordination with law enforcement and industry partners, disrupted NetNut (aka Popa), a major malicious residential proxy network that converted roughly two million consumer devices (smart TVs, streaming boxes, etc.) into exit nodes for cybercriminals and espionage actors. The network was used to anonymize malicious traffic for fraud, account takeovers, password spraying, web scraping and large-scale DDoS, and while the takedown removed millions of compromised devices the report warns the threat persists due to resale of infrastructure and continued abuse of proxy-enabled devices.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.