# Android

Type: Technology

Source: Cyber Intelligence Brief — https://getcyberbrief.com/entity/android
Canonical HTML page: https://getcyberbrief.com/entity/android

## Timeline

- **2026-07-03**: Public Disclosure of NetNut Takedown — Google and the FBI publicly announced the disruption of the NetNut residential proxy network, detailing the operation and its impact.
- **2026-06**: NetNut Botnet Disrupted by Google and FBI — Google disabled C&C accounts, deployed Play Protect to remove infected apps, and notified victims, degrading the botnet. 316 threat clusters were observed using the network in one week.
- **2026-02-19**: Industry Response — Security analysts call for stricter firmware auditing and Play Store vetting improvements.
- **2026-02-18**: Infection Scope Confirmed — Reports confirm thousands of devices are affected across multiple manufacturers.
- **2026-02-17**: Initial Discovery — Security researchers identify the Keenadu backdoor in Android firmware and apps.
- **2026-01**: IPIDEA Proxy Network Disrupted — Google and partners took down the IPIDEA residential proxy botnet, foreshadowing similar actions against NetNut.

## Recent coverage (2 stories)

### 316 Threat Clusters Hit as Google, FBI Dismantle 2M-Node NetNut Proxy
2026-07-03 18:30:08 · Sentiment: Negative · Impact: 7/10 · Sources: 2

Google and the FBI disrupted NetNut, a massive residential proxy botnet with over 2 million infected devices, cutting off 316 distinct threat clusters in a single week. The operation, targeting Alarum-linked operators, highlights the proxy-as-a-service threat to enterprise security.
Full story: https://getcyberbrief.com/story/google-fbi-netnut-316-threat-clusters

### Keenadu Backdoor Infiltrates Android Firmware and Google Play Apps
2026-02-19 00:50:13 · Sentiment: Negative · Impact: 8/10 · Sources: 2

A sophisticated new malware strain named Keenadu has been discovered embedded in Android device firmware and distributed through the Google Play Store. The backdoor grants attackers unrestricted control over infected devices, compromising all installed applications and posing a significant supply chain risk.
Full story: https://getcyberbrief.com/story/keenadu-android-backdoor-firmware-google-play

---
This page is a machine-readable summary. Sentiment measures the directional read of each development for this entity, not the tone of the reporting; impact weights consequence, not syndication reach. See https://getcyberbrief.com/guides/methodology for the full editorial methodology.