GOOGLE , in collaboration with the FBI, has dismantled the NetNut residential proxy network, which consists of over 2 million compromised Android devices. This operation targeted malware-infected devices that the network operator, linked to Israeli company Alarum Technologies, rented out to cybercriminals. Google observed multiple threat clusters utilizing NetNut for attacks.
As part of the takedown, Google disabled associated accounts and applications, thereby disrupting the backend infrastructure and significantly reducing the operator's device pool. This effort follows a previous disruption of another proxy network and highlights the interconnected nature of cybercriminal activities.