FBI seizes NetNut residential proxy domains tied to Popa botnet

Intelligence Summary

The FBI, with industry partners, seized hundreds of domains linked to the NetNut residential proxy platform. NetNut has been tied to the Popa botnet, which reportedly compromises millions of devices. Public reporting notes victims had little or no consent for participation in the proxy and botnet activity. The seizure disrupts infrastructure used for proxying and potentially for further criminal operations. Users should review systems and networks for signs of compromise and watch for traffic patterns consistent with proxy abuse.

Recommended Action

Review affected assets, schedule urgent remediation, and monitor related indicators.

Topics