Across the most recent 1 story covering NetNut — 100% negative sentiment, averaging 7/10 impact.
This entity profile aggregates every story where the entity meets our minimum relevance
threshold before it is linked here — a story naming this entity only in passing, as
competitive context for an unrelated subject, does not qualify. That threshold exists
because earlier testing surfaced entity pages cluttered with tangential mentions: a story
about two unrelated companies merging could otherwise populate a third company's page
simply because it was named once for comparison, with no real event of its own. The
timeline below reflects genuine milestones and developments specific to this entity,
cross-referenced against the same source-verification standard applied to every story on
this site. Sentiment measures the directional read of each development for this entity
specifically, not the overall tone of the reporting, and impact weights how consequential
a development is rather than how widely it was syndicated across outlets.
Figures are computed live from our source-verified story record — see our methodology for how impact and
sentiment are derived.
Timeline
Public Disclosure of NetNut Takedown
Google and the FBI publicly announced the disruption of the NetNut residential proxy network, detailing the operation and its impact.
NetNut Botnet Disrupted by Google and FBI
Google disabled C&C accounts, deployed Play Protect to remove infected apps, and notified victims, degrading the botnet. 316 threat clusters were observed using the network in one week.
IPIDEA Proxy Network Disrupted
Google and partners took down the IPIDEA residential proxy botnet, foreshadowing similar actions against NetNut.
Google and the FBI disrupted NetNut, a massive residential proxy botnet with over 2 million infected devices, cutting off 316 distinct threat clusters in a single week. The operation, targeting Alarum-linked operators, highlights the proxy-as-a-service threat to enterprise security.
This page surfaces every story mentioning NetNut across our cybersecurity coverage. We track each entity's appearance over time so readers can trace how the narrative evolves — which developments are isolated incidents, which build into longer arcs, and which reframe how operators in the space think about the entity. Story selection uses the same multi-source verification gate applied across the rest of our coverage.
Read our editorial methodology for how we identify, deduplicate, and score entity references. Our glossary defines the technical terms used across stories on this page, and our trends index contextualizes individual developments against the longer-running cybersecurity beat. Cross-entity comparisons live on our compare view.
Entities only appear on this page once the classifier scores them at a minimum 35 percent
relevance to the story, filtering out passing mentions. According to that methodology,
reviewed July 2026, this follows multi-source corroboration standards recommended by
journalism research bodies such as the Reuters Institute for the Study of Journalism.
What you see
What it tells you
Story count
Number of distinct stories where NetNut was a primary or referenced actor.
Recency clustering
Whether mentions are concentrated in a recent window (a news cycle) or distributed (a sustained arc).
Sentiment distribution
Aggregate sentiment of the stories mentioning this entity, weighted by impact score.
Cross-niche links
When the same entity surfaces in our sibling networks, we link to those views to enrich context.