Google-led operation disrupts residential proxy network built on compromised Android devices

Google-led takedown targets Android-based proxy abuse
Google says it helped disrupt a residential proxy network that relied on compromised Android devices to route internet traffic, cutting off a system that could be used to mask malicious activity behind ordinary consumer connections.
The company said the network was built from Android devices that had been compromised and enrolled into a proxy service without their owners’ knowledge. By turning infected phones and other devices into traffic relays, operators were able to make requests appear to come from residential internet addresses rather than from obvious data-center infrastructure.
That distinction matters because residential proxies are often harder to spot and block than traditional proxy servers. They can be used for a range of abusive activity, including account abuse, scraping, fraud, and other forms of concealment that depend on blending in with normal user traffic.
Google did not say how many devices were involved or identify the operators behind the network in the material provided, but it described the effort as a disruption of infrastructure tied to the abuse of compromised Android devices. The move is part of a broader pattern of efforts by platform companies and security teams to shut down proxy services that rely on infected consumer hardware.
The operation underscores how mobile devices can be pulled into larger criminal ecosystems after compromise. Once enrolled, a device can be used as a relay point without any visible sign to the owner, while the traffic it carries can help obscure the origin of requests moving through the network.
Google’s action removes one more layer of infrastructure from a market that has long attracted abuse because of the legitimacy associated with residential IP addresses. But the underlying tactic remains attractive to operators because it helps traffic look local, routine, and far less suspicious than it really is.
Sources:
Browse privately with Doppler VPN — no logs, one tap connect.