logo

Google Disrupts NetNut Residential Proxy Network Spanning 2 Million Home Devices

ID: 36f208c4-1bd3-5425-9d90-ebe15e904a66

STIX ID: report--36f208c4-1bd3-5425-9d90-ebe15e904a66

Feed Name: The Hacker News

Threat Score
75/100

Date Published: 2026-07-02

Date Updated: 2026-07-03

Author: [email protected] (The Hacker News)

...
...

Google and partners disrupted portions of NetNut (aka Popa), a large residential proxy network estimated to include at least 2 million home devices (smart TVs, streaming boxes, etc.) that act as exit nodes to route criminals' traffic. The report outlines how NetNut builds its pool (preinstalled or bundled apps that share bandwidth), evidence linking the network to Alarum Technologies, the reseller model that preserves resilience, observed active use by hundreds of threat clusters, and consumer advice to avoid unknown bandwidth-sharing apps and untrusted hardware.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.