ctipilot.ch

Popa residential-proxy botnet (Vo1d plugin) tied to Alarum/NetNut by Krebs/Qurium

campaign · campaign:popa-vo1d-residential-proxy-botnet

Coverage timeline
1
first 2026-06-21 → last 2026-06-21
Briefs
1
1 distinct
Sources cited
2
2 hosts
Sections touched
1
research
Co-occurring entities
0
no co-occurrence

Story timeline

  1. 2026-06-21CTI Daily Brief — 2026-06-21
    researchFirst coverage. Android-TV residential-proxy botnet; Qurium ties control infra to NASDAQ-listed Alarum (NetNut/NinjaTech). Attribute linkage to researchers; no charges.

Where this entity is cited

  • research1

Source distribution

  • krebsonsecurity.com1 (50%)
  • qurium.org1 (50%)

All cited sources (2)

Items in briefs about Popa residential-proxy botnet (Vo1d plugin) tied to Alarum/NetNut by Krebs/Qurium

No parsed item heading or body matches this entity yet. Items match by exact CVE id (for CVE entities), by lead-segment substring of the title in the item heading or body, or by a distinctive anchor token from the title appearing in the item heading. Coverage that lives inside a broader section (no per-item heading) is captured by the Story timeline above.