Google Disrupts Extensive Residential Proxy Networks

Google and industry partners disrupted IPIDEA, a large residential proxy network that embedded SDKs in consumer applications to convert devices into proxy exit nodes and to enroll them in botnets (e.g., BadBox 2.0, Aisuru, Kimwolf). The service was actively used by hundreds of tracked threat groups—including nation-state linked actors—for activities ranging from SaaS access and password spraying to espionage, posing widespread consumer and enterprise risk; Google combined legal action, platform protections (Play Protect), and intelligence sharing to significantly reduce the pool of proxy devices by millions.