‘Popa’ Botnet Linked to Publicly-Traded Israeli Firm

By BrianKrebs

AI Summary

Researchers from multiple security firms have linked the 'Popa' Android-based botnet — active for four years and forcing millions of consumer TV boxes to relay traffic for ad fraud and account takeovers — to NetNut, a residential proxy service operated by NASDAQ-listed Israeli firm Alarum Technologies (ALAR). The connection between a publicly traded company and a botnet infrastructure raises serious legal and regulatory implications for the proxy industry.

Read full article → https://krebsonsecurity.com/2026/06/popa-botnet-li…

Relevance score: 86.0/100

# More from June 19

1
Police cleans nearly 15,000 SocGholish-infected sites tied to Evil Corp BleepingComputer
2
Accenture to Acquire Majority Stake in Dragos, All of runZero, NetRise in $4.1 Billion OT Cybersecurity Push SecurityWeek
4
F5 issues out-of-band patches for critical NGINX vulnerabilities BleepingComputer
5
Splunk Enterprise Vulnerability Exploited in Attacks Days After Disclosure SecurityWeek
6
Killing me gently: Inside Gentlemen’s EDR killer framework WeLiveSecurity (ESET)
7
DragonForce Hackers Abuse Microsoft Teams Relays to Hide Backdoor.Turn C2 Traffic The Hacker News
8
Klue OAuth breach linked to 'Icarus' Salesforce data theft attacks BleepingComputer
9
Attackers hit pair of critical Fortinet vulnerabilities the vendor disclosed in April CyberScoop
10
INC Ransomware Emerges as Major RaaS Threat in 2026 with 830+ Victims Since 2023 The Hacker News