Felons, Fraudsters Flog Offensive Cybersecurity Startup
2026-07-09T19:23:29Z•e974ce6743d72f7cbc25216b588f96093b85f2f9b991817283343a7d2ef04daf
AWS GovCloudAlarum TechnologiesAndroid botnetCISA data leakDDoSFBI seizureGitHub leakIoT botnetJune 2026KimwolfMicrosoft Patch TuesdayNetNutNetherlands seizurePopaRussian influence operationsaccount takeoverad fraudarrestsbotnetcongressional inquirycredential exposuredomain takedownproxy abuseresidential proxyvulnerability fixes','zero-day'
What happened
Multiple high-impact cybersecurity incidents were reported: researchers linked the four‑year‑running Popa Android botnet (millions of compromised TV boxes) to NetNut, a residential‑proxy service operated by publicly traded Alarum Technologies, prompting an FBI seizure of hundreds of NetNut‑related domains and takedowns tied to the Popa infrastructure. Separately, law enforcement arrested alleged botmasters (Kimwolf) and two men in the Netherlands after seizing ~800 servers used to support Russian cyber operations. CISA is responding to a contractor who publicly posted AWS GovCloud keys and a “
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- krebs_on_security
- Record identifier
- e974ce6743d72f7cbc25216b588f96093b85f2f9b991817283343a7d2ef04daf
- Enrichment time
- 2026-07-09T19:23:29Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.