FBI Seizes NetNut Proxy Platform, Popa Botnet
ID: e7ed3b5a-afb0-5484-81aa-96cd83241eef
STIX ID: report--e7ed3b5a-afb0-5484-81aa-96cd83241eef
Feed Name: Security Boulevard
The FBI, with assistance from Google, Lumen, Shadowserver and others, seized hundreds of domains linked to NetNut and the Popa botnet — a residential proxy service built on at least two million compromised consumer devices. The network was widely resold and white‑labeled and used by diverse criminal and espionage actors to mask origins and conduct mass scraping, ad fraud, account takeover, and DDoS; Google reported substantial disruption to the proxy pool but warned the ecosystem can rebuild via reseller relationships.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
