Popa is a malware family tracked across 1 threat cluster and 3 intelligence report mentions on ThreatCluster. First observed July 3, 2026; most recent activity July 4, 2026.
On July 3, 2026, Google, in coordination with the FBI and other partners, disrupted the NetNut residential proxy network, also known as the Popa botnet. This operation targeted over 2 million compromised consumer…