The ‘Popa’ Android-based botnet, active for four years, has forced millions of consumer TV boxes to relay internet traffic for advertising fraud, account takeovers, and data scraping. Security researchers have linked this extensive botnet to NetNut, a ‘residential proxy’ provider operated by the publicly-traded Israeli firm Alarum Technologies Ltd. This connection raises significant concerns about the ethical and legal implications of residential proxy services.