Washington, United States – In a major blow to cybercrime, Google (an Alphabet company) announced the successful disruption and dismantling of a large-scale residential proxy network used to route and conceal malicious cyber activities. This achievement was the culmination of a complex, joint security operation conducted in collaboration with the U.S. Federal Bureau of Investigation (FBI), Lumen Technologies, and other cybersecurity entities.
A Cyber Coalition to Strike Attack Infrastructure
Google explained that its decisive actions targeted the residential proxy network belonging to NetNut, also known in some technical circles as “Boba.” The operation focused on crippling the accounts and services linked to the command and control operations of the malware. To support legal prosecution, Google provided law enforcement and private sector partners with detailed technical intelligence regarding the network’s infrastructure, aiding in the tracking of its operators and mitigating their disruptive activities.
How are Residential “Proxy” Networks Exploited?
Residential proxy networks function as a bridge, routing internet traffic through the IP addresses of everyday home users. While Google noted that these networks do have legitimate and legal use cases, they are heavily exploited by cybercriminals. This technology grants attackers an exceptional ability to mask the true origin of their attacks, conceal their identities, and bypass traditional security firewalls, thereby severely complicating digital tracking and forensics.
Israeli Connection and Paralyzed Network Capabilities
Google’s reports confirmed that these coordinated measures resulted in an unprecedented weakening of NetNut’s capabilities, effectively neutralizing and reducing the number of devices available to run its services by millions of units. This massive reduction drastically limits the network’s ability to continue supporting malicious cyber activities.
It is worth noting that NetNut was founded in 2017 as a subsidiary of the Israeli cybersecurity firm Alarum Technologies. Relevant authorities, in cooperation with major tech companies, are continuing their extensive investigations to track the remnants of this network’s infrastructure and prevent future threats.
