data scraping

‘Popa’ Botnet Linked to Publicly-Traded Israeli Firm

5 days ago

The Popa botnet, linked to NetNut (Alarum Technologies), uses millions of Android TV boxes as residential proxies for advertising fraud, account takeovers, and data scraping.
Popa is a plugin for the Vo1d botnet, targeting unofficial Android TV boxes that come pre-installed with proxy software, often without user consent.
Qurium and Synthient investigations link Popa to NetNut through domain registrations, SDK analysis, and founder Moishi Kramer's involvement with Ninjatech.
Despite NetNut's claims of consent mechanisms, researchers found most Popa variants and publishers do not ask for user consent, and KYC procedures are minimal.