More Than 1 Million Android Devices Compromised By Hidden Backdoor
The operation, an evolution of the original BADBOX campaign exposed in 2023, relied on backdoors pre-installed on low-cost, uncertified consumer devices to facilitate cybercriminal activities. Researchers uncovered BADBOX 2.0, a botnet of over one million infected Android devices. The botnet used pre-installed backdoors in uncertified Android devices for cybercrime. Infected devices enabled ad fraud, account takeovers, DDoS attacks, and malware distribution. The investigation, led by HUMAN’s Satori Threat Intelligence and Research team in collaboration with Google, Trend Micro, Shadowserver, and other partners, revealed strong evidence linking the perpetrators behind BADBOX to the expansion of the BADBOX 2....