The Federal Bureau of Investigation (FBI) said today it worked with industry partners to seize hundreds of domains associated with NetNut, a sprawling residential proxy service operated by the publicly-traded Israeli company Alarum Technologies [NASDAQ: ALAR]. The action comes roughly two weeks after KrebsOnSecurity published findings from multiple security firms connecting NetNut to the Popa botnet, a collection of at least two million devices that have been compromised by malicious software with little or no consent from victims.
This action follows recent investigative reporting by KrebsOnSecurity connecting NetNut to the Popa botnet, providing actionable intelligence for law enforcement.
The seizure of a major residential proxy service and botnet disruption indicates a coordinated effort against cybercrime infrastructure, impacting the economics of illicit online activities.
The operational capabilities of cybercriminals relying on such proxy networks and botnets are significantly hindered, potentially raising their costs and risks.
- · Law enforcement agencies
- · Cybersecurity industry
- · Organized crime victims
- · Alarum Technologies Ltd
- · Popa botnet operators
- · Cybercrime syndicates
- · Users unknowingly part of botnets
Disruption of services reliant on compromised residential IP addresses for malicious activities.
Increased pressure on other similar proxy services and botnet operators to cease operations or improve cloaking.
Cybercriminals may seek new, more decentralized, and harder-to-trace methods for illicit network access.
This signal links to a primary source. Continuum Brief monitors and indexes it as part of the live intelligence stream — we do not republish source content.
Read at Krebs on Security