Alphabet’s Google announced Thursday it had disrupted a network of internet-connected devices used to hide and direct malicious online traffic. The action targeted NetNut, a residential proxy operator, and the Popa botnet. Google worked with the FBI, Lumen and other partners. The company disabled accounts and services linked to NetNut malware operations and shared technical details on the infrastructure with law enforcement and industry groups. Residential proxy networks channel traffic through consumer IP addresses, concealing its source and evading security measures. While such networks have legitimate applications, they are often misused for cybercrime. Google stated the coordinated effort significantly degraded NetNut’s proxy network and operations, cutting millions of devices from its available pool. Alarum Technologies, NetNut’s Israel-based parent and a web data provider, confirmed it was notified by the FBI about seized domains. The firm said it takes the issue seriously and will cooperate fully with authorities. Bloomberg reported separately that the FBI has investigated possible NetNut and Popa connections for over a year. The probe was among several discussed by federal agencies at a Colorado meeting on proxy networks last year. The FBI has not yet commented on the Reuters inquiry.
