Google and FBI Disrupt NetNut Residential Proxy Network Hijacking 2 Million Devices

Google’s Threat Intelligence Group (GTIG), in collaboration with the FBI and Lumen, disrupted NetNut, a residential proxy network that hijacked approximately 2 million home devices to relay third-party traffic. The operation, announced this week, significantly reduced the network’s pool of usable devices. NetNut, also tracked under the alias Popa, was identified as a large-scale proxy service leveraging compromised residential infrastructure. No specific dates, technical attack vectors, or CVE IDs were disclosed in the report. The disruption targeted the network’s operational capacity but did not detail broader impacts on affected device owners.