Disrupting the World's Largest Residential Proxy Network
Essential information
- Published
- 29/01/2026 03:42
- Modified
- 29/01/2026 07:34
- Tags
- 2026-01-29 aisuru android protection badbox2.0 botnets ip addresses kimwolf legal action network disruption residential proxy sdks threat actors
- Related entities
- 2 vulnerabilities (cve), 6 observables, 1 intrusion sets (apt), 3 malware, 24 others
Description
Google and partners took action to disrupt the IPIDEA proxy network, believed to be one of the largest residential proxy networks globally. The operation involved legal action to take down control domains, sharing technical intelligence on IPIDEA software development kits, and implementing protections for Android users. IPIDEA's network enabled various malicious activities by routing traffic through residential IP addresses, making it difficult to detect and block. The network was built using SDKs embedded in applications, often without user knowledge. Google's analysis revealed connections between multiple proxy brands and SDKs controlled by the same actors. The disruption aimed to degrade IPIDEA's operations and protect consumers from security risks associated with residential proxies.