--- title: FBI Seizes NetNut Proxy Platform, Popa Botnet – Krebs on... description: The FBI, working with Google, Lumen, Shadowserver, and other partners, seized hundreds of domains tied to NetNut, a residential proxy service operated by... canonical: https://daily.dev/posts/fbi-seizes-netnut-proxy-platform-popa-botnet-krebs-on-security-kdkdrksub twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: FBI Seizes NetNut Proxy Platform, Popa Botnet – Krebs on Security | daily.dev og:description: The FBI, working with Google, Lumen, Shadowserver, and other partners, seized hundreds of domains tied to NetNut, a residential proxy service operated by... og:url: https://daily.dev/posts/fbi-seizes-netnut-proxy-platform-popa-botnet-krebs-on-security-kdkdrksub og:image: https://api.daily.dev/og/posts/kDKdRksub.png og:image:alt: FBI Seizes NetNut Proxy Platform, Popa Botnet – Krebs on Security og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # FBI Seizes NetNut Proxy Platform, Popa Botnet – Krebs on Security **[Krebs on Security](https://daily.dev/sources/krebsonsecurity)** · 7 min read · 3 upvotes · 0 comments ## Summary The FBI, working with Google, Lumen, Shadowserver, and other partners, seized hundreds of domains tied to NetNut, a residential proxy service operated by publicly-traded Israeli company Alarum Technologies. NetNut was linked to the Popa botnet — a network of at least two million compromised devices including smart TVs and streaming boxes — which was used to relay malicious traffic including ad fraud, content scraping, and account takeover attacks. Google's Threat Intelligence Group observed 316 distinct threat actor clusters using NetNut exit nodes in a single week. The takedown is expected to significantly disrupt the cybercrime ecosystem, especially following the earlier seizure of NetNut's biggest competitor, IPIDEA. Experts warn that 42% of LG webOS apps and over 25% of Samsung Tizen apps contain residential proxy SDKs, and advise consumers to stick to name-brand TV devices and avoid unofficial Android TV boxes. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [‘Popa’ Botnet Linked to Publicly-Traded Israeli Firm – Krebs on Security](https://daily.dev/posts/popa-botnet-linked-to-publicly-traded-israeli-firm-krebs-on-security-uiuu7khvo) · Krebs on Security · 1 upvotes · 0 comments - [NetNut proxy network disrupted, 2 million infected devices cut off](https://daily.dev/posts/netnut-proxy-network-disrupted-2-million-infected-devices-cut-off-ywibtnja8) · BleepingComputer · 1 upvotes · 0 comments - [Google’s Continued Disruption of Malicious Residential Proxy Networks](https://daily.dev/posts/google-s-continued-disruption-of-malicious-residential-proxy-networks-6zdypafgl) · Google Cloud · 1 upvotes · 0 comments - [Google and FBI Dismantle NetNut Residential Proxy Botnet](https://daily.dev/posts/google-and-fbi-dismantle-netnut-residential-proxy-botnet-iusqk4knt) · Latest Hacking News · 8 upvotes · 1 comments --- Tags: [#malware](https://daily.dev/tags/malware) [View this post on daily.dev](https://daily.dev/posts/fbi-seizes-netnut-proxy-platform-popa-botnet-krebs-on-security-kdkdrksub) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"FBI Seizes NetNut Proxy Platform, Popa Botnet – Krebs on Security","url":"https://daily.dev/posts/fbi-seizes-netnut-proxy-platform-popa-botnet-krebs-on-security-kdkdrksub","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/fbi-seizes-netnut-proxy-platform-popa-botnet-krebs-on-security-kdkdrksub"},"datePublished":"2026-07-09T07:50:04.144Z","dateModified":"2026-07-09T07:53:09.452Z","description":"The FBI, working with Google, Lumen, Shadowserver, and other partners, seized hundreds of domains tied to NetNut, a residential proxy service operated by...","image":"https://media.daily.dev/image/upload/s--CxzD6vbw--/f_auto/v1722860399/public/Placeholder%2005","thumbnailUrl":"https://media.daily.dev/image/upload/s--CxzD6vbw--/f_auto/v1722860399/public/Placeholder%2005","isAccessibleForFree":true,"articleSection":"Krebs on Security","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Krebs on Security","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/deb3e417ddef4d0e8cc4d704becf6004","url":"https://daily.dev/sources/krebsonsecurity"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/fbi-seizes-netnut-proxy-platform-popa-botnet-krebs-on-security-kdkdrksub","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":3},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"malware","timeRequired":"PT7M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Krebs on Security","item":"https://daily.dev/sources/krebsonsecurity"},{"@type":"ListItem","position":3,"name":"FBI Seizes NetNut Proxy Platform, Popa Botnet – Krebs on Security"}]} ```