Google’s Continued Disruption of Malicious Residential Proxy Networks

Google Threat IntelligenceJuly 2, 2026Threat Intel Endpoint Network

Background Today, in coordination with the FBI, Lumen, and others, Google took action against the NetNut residential proxy network, also known as Popa. This action builds on our disruption of the IPIDEA proxy network that took place in January 2026, and is a continuation of Google’s objective to dismantle malicious residential proxy networks.

Summary from Google Threat Intelligence.

Read the full article at Google Threat Intelligence

Explained

The technology and terms in this story. Learn more

ConceptCommand and control · C2The servers attackers use to send instructions to their malware and receive stolen data.

Google’s Continued Disruption of Malicious Residential Proxy Networks

Explained

More in Threat Intel

Synthetic identities leave US lenders with $2.4 billion in fraud exposure

Sponsored: Should your threat hunt become a detection?

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 120

BlackX UEFI bootkit exploits Baton Drop flaw to bypass Secure Boot

Researchers Push Over 2 Million Updates to Remotely Disable Popcorn Time Updater That Could Fuel a Botnet