GOOGLE DISRUPTS NETNUT PROXY NETWORK, CUTS 2M DEVICES

A coordinated effort involving Google has dismantled NetNut, a residential proxy network that exploited approximately 2 million compromised devices to route traffic and mask user identities online. ■ The Network NetNut operated by leveraging infected Android devices, including smart TVs and streaming boxes, to create a proxy infrastructure. Users of the service could route internet traffic through these compromised devices to obscure their origins and bypass geographic restrictions or security measures. ■ The Operation Google's intervention successfully disrupted the network's operations, disconnecting the 2 million infected devices from the proxy infrastructure. The action prevents future use of these devices for proxy traffic routing. ■ Implications The disruption affects multiple stakeholder groups. Device owners regain control of their compromised hardware, though many may remain unaware their devices were enlisted without consent. Organizations that relied on NetNut for web scraping, ad verification, or security testing lose access to the service. Cybersecurity researchers note that residential proxy networks create significant challenges for online security and platform integrity. ■ Context Residential proxy services operate in a gray area of legality and ethics. While legitimate uses exist—including security research and ad verification—these networks frequently enable abuse including credential stuffing, price scraping, and content theft. The devices are typically compromised through malware, cracked apps, or deceptive software installation. Google's action represents a broader effort by major technology companies to combat infrastructure that enables abuse at scale. Similar operations have targeted other malicious networks and botnets in recent years. ■ Next Steps Device owners may need to take remedial action to ensure their hardware is fully cleaned of malware. Google has not announced specific user notification procedures. The operation demonstrates that even large-scale distributed networks can be disrupted through coordinated technical and legal action.