Signal
Google disrupts NetNut residential proxy network spanning millions of devices
Evidence first: scan the strongest sources, then decide whether to go deeper.
Published 2026-07-02 14:00 UTCUpdated 2026-07-02 18:54 UTC
rss
malwarethreat_actorsincident_responsesecurity_tooling
Trend in the last 24h
Source links open
Source links and full evidence are open here. Archive history, compare-over-time, alerts, exports, API, integrations, and workflow are paid.
No card needed for the free brief.
Evidence trail (top sources)
top sources (2 domains)domains are deduped. counts indicate coverage, not truth.2 top sources shown
limited source diversity in top sources
Overview
Google, in coordination with the FBI, Lumen, and other partners, has taken significant action to disrupt the NetNut residential proxy network, also known as Popa. This network rented out millions of home devices as proxies for malicious traffic.
Entities
GoogleLumenNetNutPopaIPIDEA
Score total
1.02
Momentum 24h
2
Posts
2
Origins
2
Source types
1
Duplicate ratio
0%
Why now
- The recent takedown follows earlier disruptions of similar proxy networks, showing ongoing adversary activity.
- Google’s enhanced Android protections help prevent future infections and abuse of devices.
- Heightened awareness and coordinated action are essential as residential proxy abuse continues to evolve.
Why it matters
- Malicious residential proxy networks pose significant risks by hijacking millions of home devices for illicit traffic routing.
- Disrupting such networks helps protect user privacy and security across the internet ecosystem.
- Collaboration between tech companies and law enforcement is critical to effectively dismantle these complex threats.
LLM analysis
Topic mix: lowPromo risk: lowSource quality: high
Recurring claims
- Google has disrupted the NetNut residential proxy network that exploited millions of home devices.
How sources frame it
- Google Threat Intelligence Group: neutral
All evidence
All evidence
Google Disrupts NetNut Residential Proxy Network Spanning 2 Million Home Devices
thehackernews · thehackernews.com · 2026-07-02 18:54 UTC
Google’s Continued Disruption of Malicious Residential Proxy Networks
Mandiant Blog · cloud.google.com · 2026-07-02 14:00 UTC
Show filters & breakdown
Posts loaded: 0Publishers: 2Origin domains: 2Duplicates: -
Showing 2 / 0
Top publishers (this list)
- thehackernews (1)
- Mandiant Blog (1)
Top origin domains (this list)
- thehackernews.com (1)
- cloud.google.com (1)