Conversation

Notices

1. Embed this notice
   BrianKrebs (briankrebs@infosec.exchange)'s status on Friday, 19-Jun-2026 02:55:33 JST BrianKrebs

   New, from me: 'Popa' Botnet Linked to Publicly Traded Israeli Firm

   "For the past four years, a sprawling Android-based botnet called Popa has forced millions of consumer TV boxes to relay Internet traffic linked to advertising fraud, account takeovers, and mass data-scraping efforts. This week, researchers from multiple security firms concluded that the Popa botnet is linked to NetNut, a “residential proxy” provider operated by the publicly-traded Israeli firm Alarum Technologies Ltd [NASDAQ: ALAR]."

   https://krebsonsecurity.com/2026/06/popa-botnet-linked-to-publicly-traded-israeli-firm/

   There is an incredible amount of interesting data and findings in the reports on Popa released this week. For example, the proxy detection service Spur told me they recently scraped the LG and Samsung app stores and found that each had approximately 3,000 apps available for download. Spur said it found that more than 42 percent of apps available for download via the webOS operating system on LG smart TVs include SDKs that turn one’s television into an always-on residential proxy node. More than a quarter of the apps made for Samsung’s Tizen operating system had similar residential proxy components, Spur found.

   #proxy #popa #botnet #lg #samsung

   • scriptjunkie and Steve's Place repeated this.
   • Embed this notice
     VessOnSecurity (bontchev@infosec.exchange)'s status on Friday, 19-Jun-2026 04:34:50 JST VessOnSecurity

     in reply to

     @briankrebs
     Tired: The Chinese are spying on everybody via their TVs.
     Wired: The Israelis are spying on everybody via the Chinese TVs.