Signal

FBI and Google disrupt NetNut residential proxy network powered by millions of hijacked devices

Evidence first: scan the strongest sources, then decide whether to go deeper.

Published 2026-07-02 18:54 UTCUpdated 2026-07-03 16:28 UTC
rss
proxymalwarethreat_actorsincident_response
Source links open
Source links and full evidence are open here. Archive history, compare-over-time, alerts, exports, API, integrations, and workflow are paid.
No card needed for the free brief.
Evidence trail (top sources)
top sources (3 domains)domains are deduped. counts indicate coverage, not truth.
3 top sources shown
FBI Disrupts Widely Used NetNut Residential Proxy Service
BankInfoSecurity · News · bankinfosecurity.com · 2026-07-03 16:28 UTC
Overview

The FBI, in collaboration with Google and private partners, has dismantled NetNut, a major residential proxy network that secretly hijacked around 2 million home devices including routers and smart TVs.

Entities
GoogleFBINetNutPopa botnetMirai
Score total
1.2
Momentum 24h
3
Posts
3
Origins
3
Source types
1
Duplicate ratio
0%
Why now
  • The operation follows recent investigations revealing the scale of NetNut's compromised device network.
  • Ongoing cybercrime and espionage campaigns increasingly rely on residential proxy networks for stealth.
  • Timely disruption prevents further abuse of millions of IoT and home devices in malicious activities.
Why it matters
  • Disruption of NetNut reduces cybercriminals' ability to anonymize attacks using hijacked home devices.
  • The takedown limits the operational capacity of botnets like Popa and Mirai variants linked to large-scale DDoS attacks.
  • This action demonstrates effective public-private collaboration in combating sophisticated cyber threats.
LLM analysis
Topic mix: lowPromo risk: lowSource quality: medium
Recurring claims
  • NetNut proxy network secretly hijacked around 2 million home devices including routers and smart TVs
  • NetNut was used by cybercriminals and nation-state actors to mask identities during attacks
  • NetNut and the Popa botnet infected devices with variants of Mirai DDoS malware
How sources frame it
  • SecurityWeek: neutral
All evidence
All evidence
FBI Disrupts Widely Used NetNut Residential Proxy Service
BankInfoSecurity · bankinfosecurity.com · 2026-07-03 16:28 UTC
FBI, Google Take Down NetNut Proxy Network Used by Cyber Threat Actors
Infosecurity Magazine · infosecurity-magazine.com · 2026-07-03 09:35 UTC
Google, FBI Disrupt NetNut Residential Proxy Network Powered by Millions of Devices
SecurityWeek · securityweek.com · 2026-07-03 08:13 UTC
Show filters & breakdown
Posts loaded: 0Publishers: 3Origin domains: 3Duplicates: -
Showing 3 / 0
Top publishers (this list)
  • BankInfoSecurity (1)
  • Infosecurity Magazine (1)
  • SecurityWeek (1)
Top origin domains (this list)
  • bankinfosecurity.com (1)
  • infosecurity-magazine.com (1)
  • securityweek.com (1)