logo

FBI Seizes NetNut Proxy Platform, Popa Botnet

ID: 1858bf24-a79d-55db-b477-81bad8b812c1

STIX ID: report--1858bf24-a79d-55db-b477-81bad8b812c1

Feed Name: Krebs on Security

Threat Score
82/100

Date Published: 2026-07-02

Date Updated: 2026-07-03

Author: BrianKrebs

...
...

### Executive Summary The FBI and IRS, assisted by industry partners including Google, seized hundreds of domains linked to NetNut (Alarum Technologies) and the Popa botnet — a large residential proxy network that turned millions of consumer devices (smart TVs, streaming boxes) into always-on proxy nodes. The infrastructure was widely resold and used by cybercriminals and observed in espionage activity for mass scraping, advertising fraud, account takeover, and to facilitate DDoS; Google and other providers have disrupted operations but warn the ecosystem can reconstitute via reselling and white-labeling.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.