FBI Seizes NetNut Proxy Platform, Popa Botnet
FBI seized domains of NetNut, a residential proxy service run by Israel-listed Alarum Technologies, and the associated Popa botnet—highlighting how legitimate-seeming proxy infrastructure enables credential-stuffing and fraud at scale.
Summary written by editorial AI · Source link below
The Federal Bureau of Investigation (FBI) said today it worked with industry partners to seize hundreds of domains associated with NetNut, a sprawling residential proxy service operated by the publicly-traded Israeli company Alarum Technologies [NASDAQ: ALAR]. The action comes roughly two weeks after KrebsOnSecurity published findings from multiple security firms connecting NetNut to the Popa botnet, a collection of at least two million devices that have been compromised by malicious software wi
Editorial Analysis
Enterprises using third-party proxy or traffic-analytics services should verify that providers are not built on compromised residential endpoints, which can taint data and expose legal liability.
Audit any contracted proxy or web-scraping services against the published NetNut IOC list and verify that no corporate traffic routes through compromised residential nodes.
A publicly traded proxy provider was seized by the FBI for operating on millions of infected devices—third-party vendor due diligence must cover infrastructure provenance.
Forward-looking interpretation drafted by editorial AI under human review — not a reproduction of the source. See methodology.
External link — opens at Krebs on Security in a new tab.
More from the Threat Intel Desk
- PHP2Shell Exploitation Hits Government Entity Amid Global Scanning and Signs of AI-Assisted Hacking1d
- BlackX UEFI bootkit exploits Baton Drop flaw to bypass Secure Boot2d
- Trust Is Not What It Seems — And Fraudsters Are Counting on It3d
- AI Tools Are Generating Massive Attacks for Little Cost3d
- The Good, the Bad and the Ugly in Cybersecurity - Week 43 (2026)3d