FBI seizes NetNut residential proxy domains tied to Popa botnet

Intelligence Summary

The FBI, with industry partners, seized hundreds of domains linked to the NetNut residential proxy platform. NetNut has been tied to the Popa botnet, which reportedly compromises millions of devices. Public reporting notes victims had little or no consent for participation in the proxy and botnet activity. The seizure disrupts infrastructure used for proxying and potentially for further criminal operations. Users should review systems and networks for signs of compromise and watch for traffic patterns consistent with proxy abuse.

Recommended Action

Confirm whether the affected technology is in use in your environment before deciding on remediation. Until then, watch authentication and outbound traffic logs for the indicators described in the source. This signal rests on a single report, so corroborate it before acting on anything irreversible.

Topics