Security researchers have connected the Popa Android botnet to NetNut, a residential proxy service operated by publicly-traded Alarum Technologies Ltd. The botnet has compromised millions of TV boxes for four years.
The Popa botnet has infected millions of consumer TV boxes, redirecting Internet traffic to support advertising fraud, account takeovers, and large-scale data scraping. Multiple security firms announced this week that the operation traces back to NetNut, a residential proxy provider offering access to consumer internet connections.
Alarum Technologies, listed on NASDAQ under ticker ALAR, operates NetNut as part of its business model. Residential proxies mask traffic origins by routing requests through real consumer devices, a technique commonly exploited for fraud and unauthorized data collection.
The four-year campaign demonstrates how legitimate-appearing companies can mask illicit infrastructure behind proxy services. Researchers did not disclose whether Alarum Technologies was aware of the botnet's use of NetNut infrastructure or the extent of the company's involvement in Popa's operations.
The disclosure raises questions about oversight of proxy service providers and their responsibility for detecting abusive traffic patterns on their networks.
Donating or recycling an old laptop is environmentally responsible, but failing to erase your data first can expose personal information to new owners or data recovery specialists.
BigCommerce has alerted merchants to a data breach stemming from compromised Ribon app credentials. Attackers used the stolen access to inject malicious scripts into online stores.
Apple's Safari browser offers stronger default privacy protections than most competitors on iPhone, but users shouldn't assume it shields them from all threats. The built-in features have clear limitations.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an alert warning of active exploitation of three Linux kernel vulnerabilities, including one rated critical. Attackers are currently leveraging these flaws in the wild.