THREATOPS

THREAT OPS › Threat News › Google’s Continued Disruption of Malicious Residential Proxy Networks

Google’s Continued Disruption of Malicious Residential Proxy Networks

medmandiant_gtiPublished 2026-07-02

<div class="block-paragraph_advanced"><h3><span style="vertical-align: baseline;">Background</span></h3> <p><span style="vertical-align: baseline;">Today, in coordination with the FBI, Lumen, and others, Google took action against the NetNut residential proxy network, also known as Popa. This action builds on our </span><a href="https://cloud.google.com/blog/topics/threat-intelligence/disrupting-l

MITRE ATT&CK techniques

IP AddressesT1590.005
VulnerabilitiesT1588.006

Indicators of compromise

https://synthient.com/blog/who-are-the-victims-of-residential-proxiesurl
https://spur.us/blog/residential-proxy-lateral-movement-riskurl
https://www.android.com/tv/url

Original source: https://cloud.google.com/blog/topics/threat-intelligence/google-continued-disruption-residential-proxy-networks/