New, from me: 'Popa' Botnet Linked to Publicly Traded Israel Firm
"For the past four years, a sprawling Android-based botnet called Popa has forced millions of consumer TV boxes to relay Internet tra...
Many readers have been asking if this or that app for their TV is bundled with residential proxy software. Many of the apps in question -- as well as publisher/component names to look for -- are detailed in links throughout the story. But for the sake of simplicity, here they are:
Qurium's report: https://www.qurium.org/forensics/finding-popa/
Synthient: https://synthient.com/blog/popa-from-sourcing-to-distribution
Spur: https://spur.us/blog/how-proxy-providers-co-opt-entire-networks
Nokia Deepfield: https://github.com/deepfield/public-research/blob/main/reports/2026-06-18-robovpn-neunative.md
Include Security: https://blog.includesecurity.com/2026/06/the-smart-tv-in-your-livingroom-is-a-node-in-the-aiscraping-economy/
Infoblox: https://www.infoblox.com/blog/threat-intelligence/residential-proxies-in-the-wild/
Qurium's report: https://www.qurium.org/forensics/finding-popa/
Synthient: https://synthient.com/blog/popa-from-sourcing-to-distribution
Spur: https://spur.us/blog/how-proxy-providers-co-opt-entire-networks
Nokia Deepfield: https://github.com/deepfield/public-research/blob/main/reports/2026-06-18-robovpn-neunative.md
Include Security: https://blog.includesecurity.com/2026/06/the-smart-tv-in-your-livingroom-is-a-node-in-the-aiscraping-economy/
Infoblox: https://www.infoblox.com/blog/threat-intelligence/residential-proxies-in-the-wild/
1
