FBI Seizes NetNut Proxy Platform, Popa Botnet(krebsonsecurity.com)

7 pointsby k1m2 hours ago2 comments

    The Federal Bureau of Investigation (FBI) said today it worked
    with industry partners to seize hundreds of domains associated
    with NetNut, a sprawling residential proxy service operated by
    the publicly-traded Israeli company 
    Alarum Technologies [NASDAQ: ALAR].

A_D_E_P_T2 hours ago
> https://x.com/weezerOSINT/status/2072772333329416654
> They seized the wrong domain. Netnut is still up and running
> The domain FBI seized: https://netnut.com
> The real domain https://netnut.io
The backend infrastructure, for similar reasons, is probably still operational, even if it might have taken a hit.
- k1m2 hours ago
  Google shows netnut.com[1] being the same thing, so not sure it's the wrong domain. Maybe not the main one. Brian Krebs' comment on this[2]:
  > Pretty sure they're working on getting that domain too, but it's taking longer for some reason. Either way, they have dismantled the botnet's back end infrastructure, so for now it's not doing much.
  [1] https://www.google.com/search?q=site%3Anetnut.com
  [2] https://www.linkedin.com/posts/bkrebs_new-breaking-fbi-seize...
  - A_D_E_P_Tan hour ago
    WRT [1], you get a lot more results with https://www.google.com/search?q=site%3Anetnut.io
    And if they didn't even grab the main domain that the service used, why so confident that they've totally dismantled the back end infrastructure?
    k1man hour ago
    I personally have no insight into what they have or haven't dismantled. Just found the article interesting (had never heard of the company). Was responding to the "They seized the wrong domain" claim in the tweet you quoted. I read that and thought they disabled an unrelated domain, which doesn't appear to be the case. As for the main domain, no idea about that. Someone brought that up to the author of the piece, and the bit I quoted was his response. I have no more info beyond that.