← Back to Feed
Google’s Continued Disruption of Malicious Residential Proxy Networks
July 2, 2026 · Google Cloud Security · Severity: HIGH
Google coordinated with the FBI and Lumen to disrupt the NetNut residential proxy network, also known as Popa. Actions included disabling accounts, sharing technical intelligence, and using Google Play Protect to warn users. This disruption builds on previous efforts against the IPIDEA proxy network.
Key Takeaways
- Google disrupted the NetNut residential proxy network with FBI and Lumen.
- Actions included disabling accounts and sharing intelligence on C2 infrastructure.
- Google Play Protect warned users and disabled apps with NetNut SDKs.