Google Disrupts Malware Proxy Network Used by Hackers

Google has disrupted NetNut, a major proxy network used for malware operations. The tech giant took action against the network in partnership with the FBI and Lumen.

NetNut, also known as “Popa,” was a residential proxy network that allowed users to route internet traffic through consumer IP addresses. This could mask the origin of online activity and help bypass security defenses.

Google disabled accounts and services used in NetNut-related malware command-and-control operations and shared technical intelligence on the group’s infrastructure with law enforcement and industry partners.

Founded in 2017, NetNut offered rotating residential, ISP, mobile, and datacenter proxies. It was one of the world’s largest commercial “residential proxy” networks, extensively hijacked by hackers to fuel cyberattacks.