Google, FBI Disrupt NetNut Residential Proxy Network Powered by Millions of Devices

NetNut rented access to millions of compromised devices, allowing cybercriminals and nation-state actors to mask their identities during attacks. The post Google, FBI Disrupt NetNut Residential Proxy Network Powered by Millions of Devices appeared first on SecurityWeek .

The article reports that Google, in coordination with the FBI and industry partners, disrupted the NetNut residential proxy network, which was powered by millions of hijacked consumer devices and used by cybercriminals and nation-state actors to mask their identities and route malicious traffic.[1][2] NetNut’s infrastructure effectively turned compromised end-user systems into a large-scale anonymization and traffic-laundering layer for abuse, including attacks and fraud.[1][2] From a CyberSE.AI perspective, this highlights a critical AI supply chain risk: enterprise AI agents and data pipelines that rely on external web data, APIs, or scraping services can unknowingly ingest content and telemetry routed through compromised residential proxies, undermining attribution, threat intelligence, and compliance controls. Organizations should treat residential proxy and data-collection providers as high-risk third parties, subjecting them to rigorous vendor due diligence, network trust policies, and SBOM-style transparency for data sourcing, and incorporate detection of proxy-origin traffic into AI security readiness and monitoring.