Google and FBI Disrupt NetNut Proxy Network Linked to 2 Million Devices

On July 3, 2026 Google, working with the FBI and partners, disrupted the NetNut (Popa) residential proxy network that abused over 2 million compromised consumer devices (primarily smart TVs and streaming boxes) to route malicious traffic. The operation disabled accounts and services tied to the botnet's command-and-control infrastructure, shared technical intelligence with law enforcement, and is expected to significantly reduce the pool of available proxy devices; the report notes active criminal exploitation (credential stuffing and password spraying) and that this action builds on previous takedowns of similar residential proxy networks.