Google’s Threat Intelligence Group, working with the FBI and other partners, disrupts NetNut, a residential proxy network that routes traffic through compromised home devices. Multiple outlets report that NetNut gives cybercriminals and other actors access to a large pool of devices—including Android-based systems such as smart TVs and streaming boxes—used as rented relays to mask identities and traffic origins. The operation reduces the number of usable devices available to the network, with reporting that millions of compromised devices are affected. One account says the disruption cuts off access tied to roughly two million infected devices, while other coverage describes the degradation as significantly shrinking the network’s pool. Google also describes NetNut as being spread across home networks and identifies the infrastructure as operating under aliases, including “Popa,” as reported by outlets citing Google’s identification. The combined reporting indicates the action targets the network’s ability to provide proxy services by disrupting access to the infected device pool rather than publicly attributing specific attacks.