![[FORECAST] NetNut/Popa was a capacity disruption, not just a botnet takedown](https://storage.ghost.io/c/06/e5/06e5730b-7d78-4713-9cec-6cba31d297f5/content/images/size/w600/2026/07/z.png)
forecasts
[FORECAST] NetNut/Popa was a capacity disruption, not just a botnet takedown
The NetNut/Popa action matters. The harder question is whether the residential-proxy market reroutes.
botnet
![[SIGNALS WEEKLY] Ransomware’s New Priority Targets—Hypervisors, Recovery Paths, and Control Planes](https://storage.ghost.io/c/06/e5/06e5730b-7d78-4713-9cec-6cba31d297f5/content/images/size/w600/2026/03/z-5.png)
weekly
[SIGNALS WEEKLY] Ransomware’s New Priority Targets—Hypervisors, Recovery Paths, and Control Planes
Ransomware crews aren’t stopping at endpoints. They’re going after hypervisors, backups, and control planes now. KEV keeps growing, exploitation stays hot, and defender timelines keep getting shorter. Lovely. 🔥💀⚙️
vo1d
Vo1d Botnet: Exploiting Android TV Devices for Cybercriminal Gain
The Vo1d botnet is a sophisticated malware campaign that has compromised approximately 1.6 million Android TV devices worldwide. Originating from cybercriminal groups exploiting outdated software and security flaws...