← Back to Feed

Google’s Continued Disruption of Malicious Residential Proxy Networks

July 2, 2026 · Google Cloud Security · Severity: HIGH

Google, in coordination with the FBI and Lumen, disrupted the NetNut residential proxy network, also known as Popa, by disabling accounts and sharing technical intelligence. This action builds on a previous disruption of the IPIDEA proxy network and aims to degrade NetNut's operations and its reseller program. Google Play Protect now automatically warns users and disables applications that incorporate NetNut SDKs.

Key Takeaways

  • Google disrupted the NetNut residential proxy network in coordination with the FBI and Lumen.
  • Google disabled accounts and shared intelligence to degrade NetNut's malware C2 infrastructure.
  • Google Play Protect now warns users and disables apps using NetNut SDKs.
☕ Buy a Coffee