Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

FBI Seizes NetNut Proxy Platform, Popa Botnet

krebsonsecurity.com

Post reply on HN
Print view View original

1–10 of 19 posts

Re: FBI Seizes NetNut Proxy Platform, Popa Botnet

#2

Post by A_D_E_P_T »

> https://x.com/weezerOSINT/status/2072772333329416654

> They seized the wrong domain. Netnut is still up and running

> The domain FBI seized: https://netnut.com

> The real domain https://netnut.io

The backend infrastructure, for similar reasons, is probably still operational, even if it might have taken a hit.

Re: FBI Seizes NetNut Proxy Platform, Popa Botnet

#3

Post by k1m »

A_D_E_P_T wrote: post #2

> https://x.com/weezerOSINT/status/2072772333329416654 > They seized the wrong domain. Netnut is still up and running > The domain FBI seized: https://netnut.com > The real domain https://netnut.io The backend infrastructure, for similar reasons, is probably still operational, even if it might have taken a hit.

Google shows netnut.com[1] being the same thing, so not sure it's the wrong domain. Maybe not the main one. Brian Krebs' comment on this[2]:

> Pretty sure they're working on getting that domain too, but it's taking longer for some reason. Either way, they have dismantled the botnet's back end infrastructure, so for now it's not doing much.

[1] https://www.google.com/search?q=site%3Anetnut.com

[2] https://www.linkedin.com/posts/bkrebs_new-breaking-fbi-seize...

Re: FBI Seizes NetNut Proxy Platform, Popa Botnet

#4

Post by A_D_E_P_T »

k1m wrote: post #3
A_D_E_P_T wrote: post #2

> https://x.com/weezerOSINT/status/2072772333329416654 > They seized the wrong domain. Netnut is still up and running > The domain FBI seized: https://netnut.com > The real domain https://netnut.io The backend infrastructure, for similar reasons, is probably still operational, even if it might have taken a hit.

Google shows netnut.com[1] being the same thing, so not sure it's the wrong domain. Maybe not the main one. Brian Krebs' comment on this[2]: > Pretty sure they're working on getting that domain too, but it's taking longer for some reason. Either way, they have dismantled the botnet's back end infrastructure, so for now it's not doing much. [1] https://www.google.com/search?q=site%3Anetnut.com [2] https://www.linkedin…

WRT [1], you get a lot more results with https://www.google.com/search?q=site%3Anetnut.io

And if they didn't even grab the main domain that the service used, why so confident that they've totally dismantled the back end infrastructure?

Re: FBI Seizes NetNut Proxy Platform, Popa Botnet

#5

Post by k1m »

A_D_E_P_T wrote: post #4
k1m wrote: post #3

Earlier quoted context omitted.

Google shows netnut.com[1] being the same thing, so not sure it's the wrong domain. Maybe not the main one. Brian Krebs' comment on this[2]: > Pretty sure they're working on getting that domain too, but it's taking longer for some reason. Either way, they have dismantled the botnet's back end infrastructure, so for now it's not doing much. [1] https://www.google.com/search?q=site%3Anetnut.com [2] https://www.linkedin…

WRT [1], you get a lot more results with https://www.google.com/search?q=site%3Anetnut.io And if they didn't even grab the main domain that the service used, why so confident that they've totally dismantled the back end infrastructure?

I personally have no insight into what they have or haven't dismantled. Just found the article interesting (had never heard of the company). Was responding to the "They seized the wrong domain" claim in the tweet you quoted. I read that and thought they disabled an unrelated domain, which doesn't appear to be the case. As for the main domain, no idea about that. Someone brought that up to the author of the piece, and the bit I quoted was his response. I have no more info beyond that.

Re: FBI Seizes NetNut Proxy Platform, Popa Botnet

#6

Post by WarOnPrivacy » 

    The Federal Bureau of Investigation (FBI) said today it worked
    with industry partners to seize hundreds of domains associated
    with NetNut, a sprawling residential proxy service operated by
    the publicly-traded Israeli company 
    Alarum Technologies [NASDAQ: ALAR].
Post reply on HN