Google coordinated with the FBI and Lumen to disrupt the NetNut residential proxy network, disabling associated Google accounts used for malware command and control and enabling Google Play Protect warnings. Google estimates the network controlled about 2 million devices globally, observing 316 distinct threat clusters using suspected exit nodes in a single week during June 2026.