Google coordinated with the FBI and Lumen to disrupt NetNut, a residential proxy network of roughly 2 million compromised devices, disabling associated accounts and warning Play Protect users about apps bundling NetNut SDKs. In one week in June 2026, researchers identified 316 distinct threat clusters exploiting suspected NetNut exit nodes.