Proxy Broker Takedown Cuts Off Many Abuse Campaigns
This is bigger than a botnet clean-up. NetNut was a commercial proxy layer that many unrelated operators rented to make abuse traffic look like ordinary home connections, so disrupting it cuts off access for more than one campaign at once.
Google and the FBI said they disabled the Google accounts and services used for command and control, seized domains, and removed infected apps, which cut millions of residential exit nodes out of service. Google said 316 threat clusters used NetNut nodes in a single week in June for password-spraying, credential-stuffing, fraud, and data scraping, and the service also ran a reseller and whitelabel model that let other brands sell the same infrastructure.
That makes the ripple effect wider than a single network collapse. If buyers of residential proxies shift to competing providers, the same identity-abuse patterns can persist even after NetNut is degraded.