{"id":285068,"date":"2026-07-02T14:54:00","date_gmt":"2026-07-02T18:54:00","guid":{"rendered":"https:\/\/news-you-need.com\/index.php\/2026\/07\/02\/google-disrupts-netnut-residential-proxy-network-spanning-2-million-home-devices\/"},"modified":"2026-07-02T16:20:08","modified_gmt":"2026-07-02T20:20:08","slug":"google-disrupts-netnut-residential-proxy-network-spanning-2-million-home-devices","status":"publish","type":"post","link":"https:\/\/news-you-need.com\/index.php\/2026\/07\/02\/google-disrupts-netnut-residential-proxy-network-spanning-2-million-home-devices\/","title":{"rendered":"Google Disrupts NetNut Residential Proxy Network Spanning 2 Million Home Devices"},"content":{"rendered":"

Google Disrupts NetNut Residential Proxy Network Spanning 2 Million Home Devices<\/a><\/p>\n

https:\/\/thehackernews.com\/2026\/07\/google-disrupts-netnut-residential.html<\/a><\/p>\n

Publish Date: 2026-07-02 14:54:00<\/a><\/p>\n

Source Domain: thehackernews.com<\/a><\/p>\n

\ue804Swati Khandelwal<\/span>\ue802Jul 02, 2026<\/span><\/span>Cybercrime \/ Botnet<\/span><\/p>\n

Google has significantly degraded NetNut, one of the biggest networks that turns home devices into rented relays for other people’s traffic.<\/p>\n

Working with the FBI, Lumen, and others, Google’s Threat Intelligence Group (GTIG)\u00a0said this week\u00a0it had reduced the network’s pool of usable devices by millions.<\/p>\n

Google identifies NetNut, also tracked as Popa, as a network spread across home devices worldwide, including smart TVs and streaming boxes, and GTIG estimates the network holds at least 2 million devices.<\/p>\n

If one of those devices is in your home, strangers can route their own traffic through your internet connection, and your address gets the blame for whatever they do with it.<\/p>\n

How It Works<\/h2>\n

A residential proxy network sells access to real home internet addresses. Attackers pay to route their traffic through your connection so it looks like ordinary home browsing, not the datacenter traffic that security tools tend to block.<\/p>\n

To build that pool, operators need their code running on home devices. Some devices ship with it pre-installed on cheap off-brand hardware; others pick it up when someone installs a free app that hides it. Once it is running, the device becomes an “exit node,” a doorway that other people’s traffic flows through.<\/p>\n

Google says an exit node brings outside traffic inside the home network, giving attackers a foothold to reach other devices on it. Some of these home gadgets have also been pulled into large attack botnets such as Mirai and Badbox 2.0.<\/p>\n

In a single week in June, GTIG counted 316 distinct threat clusters using suspected NetNut exit nodes, including cybercriminal and espionage groups, to hide their real location and run password-guessing attacks.<\/p>\n

\"\"<\/p>\n

The Company Behind It<\/h2>\n

Unlike most proxy botnets, NetNut traces back to a public company. In June, researchers at Qurium, Synthient, Nokia Deepfield, and Spur tied Popa to NetNut.<\/p>\n

NetNut is a proxy provider owned by publicly…<\/p>\n

Source<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Google Disrupts NetNut Residential Proxy Network Spanning 2 Million Home Devices https:\/\/thehackernews.com\/2026\/07\/google-disrupts-netnut-residential.html Publish Date: 2026-07-02…<\/p>\n","protected":false},"author":1,"featured_media":285069,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEjAH6tBAe18U0FqA-i5kNNNQYeXjY_LBflzBqVD5rq81OAC6q9c8UsDBsQb5K2F7IAfof5_JZCBpS51DNp63jsXfk4qqwLkckDh4nq-z-Gj0zoRwQu5IZYiNHiBlpp3C-6OR84JeDfPmIr4VLTp2NN6uHRYl0qT273wrbpcnUmd5SbIJH07cPHQxMo6VgI\/s1600\/proxy.jpg","fifu_image_alt":"","footnotes":""},"categories":[15],"tags":[],"class_list":["post-285068","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity"],"_links":{"self":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/285068"}],"collection":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/comments?post=285068"}],"version-history":[{"count":1,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/285068\/revisions"}],"predecessor-version":[{"id":285070,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/285068\/revisions\/285070"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/media\/285069"}],"wp:attachment":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/media?parent=285068"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/categories?post=285068"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/tags?post=285068"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}