Global crackdown dismantles massive proxy network fueled by hacked devices
A far-reaching cybercrime operation that turned everyday gadgets into hidden gateways for online anonymity has been dismantled. A coordinated takedown involving Google has severed NetNut, a residential proxy network that secretly routed traffic through more than two million hacked devices—including Android phones, smart TVs, and streaming boxes.
The hidden infrastructure behind millions of connections
NetNut operated by commandeering devices already infected with malware, turning them into “residential proxies.” These proxies allowed cybercriminals to mask their real IP addresses by routing web traffic through unsuspecting users’ devices. The setup enabled large-scale fraud, data theft, and evasion of security controls without the device owners’ knowledge. Security researchers found that compromised Android devices were particularly targeted, reflecting the network’s reliance on mobile ecosystems to scale quickly.
A rare collaboration delivers a decisive blow
The disruption marks one of the first public cases in which a major tech company has directly partnered with cybersecurity teams to dismantle a large-scale proxy network. Google’s involvement was pivotal, leveraging its threat intelligence and infrastructure to sever NetNut’s backend connections. While the full scope of criminal activity remains under investigation, authorities and security firms warn that similar proxy networks continue to operate, often exploiting unpatched devices and weak credentials.
The takedown sends a clear signal to cybercriminals: networks built on compromised devices are increasingly vulnerable to coordinated action. For users, the incident underscores the importance of keeping software updated, using strong passwords, and installing reputable security tools—small steps that can prevent devices from becoming unwitting tools in global cybercrime.
Source: BleepingComputer. AI-assisted editorial synthesis — TechnoExpress.