- FBI seized hundreds of domains linked to NetNut, an Israeli residential proxy service tied to the Popa botnet.
- NetNut used compromised home devices like smart TVs to create proxy nodes for cybercrime, including ad fraud and account takeovers.
- Google disabled NetNut-related accounts and apps, noting widespread use by threat actors to mask malicious traffic.
- NetNut's parent company Alarum Technologies is cooperating with law enforcement following the domain seizures.
- Security experts say the takedown disrupts major proxy networks, impacting cybercrime and reducing DDoS botnet resources.
- Consumers are advised to use reputable TV brands and avoid unofficial Android systems to prevent proxy enrollment.
- Proxy tracking services and apps for smart TVs often include SDKs that turn devices into proxy nodes without user consent.
- Efforts are ongoing to seize additional domains, with some NetNut infrastructure still active or under legal scrutiny.