FBI SEIZES NETNUT PROXY PLATFORM, POPA BOTNET

The action represents a coordinated effort between federal law enforcement and industry partners to dismantle infrastructure connected to malicious activity. NetNut operated as a proxy service offering users the ability to route internet traffic through residential IP addresses, a capability that can mask user identity and location. Security researchers identified NetNut's connection to the Popa botnet roughly two weeks before the seizure, according to findings published by KrebsOnSecurity. The botnet comprises at least two million compromised devices infected with malicious software. Alarums Technologies, the parent company of NetNut, is publicly traded on NASDAQ under ticker symbol ALAR. The seizure marks a significant enforcement action against a company operating in the proxy service sector, which has faced increasing scrutiny over potential misuse for cybercrime, fraud, and evading security systems. The FBI's action underscores ongoing tensions between legitimate proxy service operations and their exploitation by malicious actors. Residential proxies route traffic through actual home internet connections, making detection and blocking more difficult than traditional data center proxies. The seizure included hundreds of domains, suggesting NetNut maintained extensive infrastructure to support its operations. The takedown likely disrupts services for both legitimate and illicit users relying on the platform. This enforcement action follows a broader pattern of law enforcement targeting proxy services and botnet infrastructure. Earlier cases have demonstrated the challenges in distinguishing between legitimate privacy tools and platforms facilitating criminal activity.