Google and partners cut NetNut residential proxy pool by millions

Intelligence Summary

Google reports it has significantly degraded the NetNut residential proxy network, which repurposes home devices as relay nodes. The disruption reduced the network’s usable device pool by millions, according to Google Threat Intelligence Group. Google says it worked with the FBI, Lumen, and other partners to limit NetNut’s operational capacity. Because residential proxies are commonly used for abuse such as fraud and evasion, weakening the botnet-like relay pool can reduce attackers’ effectiveness. Users and organizations should review proxy-usage monitoring, block known bad infrastructure, and tighten traffic validation to mitigate proxy-based fraud and scraping. Network operators should also ensure compromised endpoints are identified and remediated.

Recommended Action

Review affected assets, schedule urgent remediation, and monitor related indicators.

Topics