‘Popa’ Botnet Linked to Publicly-Traded Israeli Firm

Summary

For the past four years, a sprawling Android-based botnet called Popa has forced millions of consumer TV boxes to relay Internet traffic linked to advertising fraud, account takeovers, and mass data-scraping efforts. This week, researchers from multiple security firms concluded that the Popa botnet is linked to NetNut, a "residential proxy" provider operated by the publicly-traded Israeli firm Alarum Technologies Ltd [NASDAQ: ALAR].

SpinGraph analysis pending — check back after processing.

• CISA Admin Leaked AWS GovCloud Keys on Github
• Alleged Kimwolf Botmaster ‘Dort’ Arrested, Charged in U.S. and Canada
• Lawmakers Demand Answers as CISA Tries to Contain Data Leak
• Netherlands Seizes 800 Servers, Arrests 2 for Aiding Cyberattacks
• Hackers Used Meta’s AI Support Bot to Seize Instagram Accounts
• A Record-Breaking Patch Tuesday for June 2026