#badbox — Public Fediverse posts

RE: https://infosec.exchange/@deepfield/116902630342760982

guy just wanted to watch the football without paying. now his tv has a job. and a boss. and clients.

#badbox

New, from our ERT: https://github.com/deepfield/public-research/blob/main/ipmoyu/report.md

The APK is clean. No sample would have tipped us off; the traffic did.

A DNS hunt on networks we protect flagged devices beaconing to an unlisted BADBOX C2. We pivoted on the shared infrastructure to a free IPTV app dropping a residential-proxy exit node. Skip the cable bill, get a tenant.

The ERT tracks DDoS, not IPTV (though Deepfield does track video for analytics). But an exit node isn’t video. It’s a TV dialing out, minding its business. Someone else’s business.

#threatintel #badbox #moyu

Primed for #Malware: Stop Selling Compromised #Android Devices

https://www.eff.org/deeplinks/2026/06/primed-malware-stop-selling-compromised-android-devices

#cybersecurity #badbox #IoT #streaming #piracy

Tivi: Seuraavat merkit voivat Kyberturvallisuuskeskuksen mukaan viitata siihen, että tv-laite sisältää #haittaohjelma #Badbox'in:
- Sovellukset tai verkkosivut ohjautuvat väärille sivuille, esimerkiksi väärennettyihin hakukone- tai pankkisivustoihin.
- Mainoksia voi näkyä sovelluksissa tai käyttöliittymässä, jossa ei pitäisi olla mainoksia.
- Laite voi asentaa uusia sovelluksia itsestään tai ilman lupaa.
... jne. Elisan mukaan Badboxin poistaminen ei yleensä ole mahdollista -> elektronikkaromuun

🤖 #Badbox war zeitweilig mit bis zu 58 % der infizierten Geräte das größte aktive #Botnetz in #Deutschland. Das Besondere: Die Schadsoftware wurde bereits während der Produktion in #Android-Geräte wie TV‑Boxen, Tablets und digitale Bilderrahmen eingeschleust.

⚠️ Die schiere Anzahl der kompromittierten Geräte macht unter anderem Badbox zu einer der ernst zu nehmenden Bedrohungen für die globale #Cybersicherheit.

📊 Mehr zu dem Thema im #BSILagebericht2025 👉️ https://www.bsi.bund.de/Lagebericht

#reminder Das #BADBOX-Botnetz bedroht über 30.000 Android-Geräte weltweit 🚨🔒. Cyberkriminelle nutzen gekaperte Geräte für Angriffe und Datenschutzrisiken. Mehr dazu vom BSI: https://www.bsi.bund.de/DE/Themen/Verbraucherinnen-und-Verbraucher/Cyber-Sicherheitslage/Methoden-der-Cyber-Kriminalitaet/Botnetze/Steckbriefe-aktueller-Botnetze/Steckbriefe/BADBOX/badbox_node.html/ #CyberSecurity #Botnet 🛡️ #xiaomi

Falls der Link nicht geht
https://archive.ph/HmHtP

Google klagt gegen Betreiber des #BadBox 2.0-Botnets, das über zehn Millionen Android-Geräte infiziert hat. Die Cyberkriminellen nutzen die kompromittierten Geräte für Werbebetrug und als Proxy-Netzwerk. https://winfuture.de/news,152376.html?utm_source=Mastodon&utm_medium=ManualStatus&utm_campaign=SocialMedia

Google Sues Operators of a 10 Million Device Android Set-Top Box Botnet

https://torrentfreak.com/google-sues-operators-of-a-10-million-device-android-set-top-box-botnet-250721/

#IPTVandStreaming #Androidbox #Lawsuits #badbox #botnet #google

Google Sues Operators of 10-Million-Device Badbox 2.0 Botnet – Source: www.securityweek.com https://ciso2ciso.com/google-sues-operators-of-10-million-device-badbox-2-0-botnet-source-www-securityweek-com/ #rssfeedpostgeneratorecho #CyberSecurityNews #Malware&Threats #securityweekcom #securityweek #FEATURED #lawsuit #BadBox #botnet #Google #fraud

Google Sues Operators of 10-Million-Device Badbox 2.0 Botnet https://www.securityweek.com/google-sues-operators-of-10-million-device-badbox-2-0-botnet/ #Malware&Threats #Featured #lawsuit #BadBox #botnet #google #fraud

Google Sues Operators of 10-Million-Device Badbox 2.0 Botnet https://www.securityweek.com/google-sues-operators-of-10-million-device-badbox-2-0-botnet/ #Malware&Threats #Featured #lawsuit #BadBox #botnet #google #fraud

BADBOX 2.0 Found Preinstalled on Android IoT Devices Worldwide https://hackread.com/badbox-2-0-preinstalled-android-iot-devices-worldwide/ #Cybersecurity #Vulnerability #Security #BADBOX20 #Android #Malware #Badbox #China #IoT #TV

BADBOX 2.0 Found Preinstalled on Android IoT Devices Worldwide – Source:hackread.com https://ciso2ciso.com/badbox-2-0-found-preinstalled-on-android-iot-devices-worldwide-sourcehackread-com/ #1CyberSecurityNewsPost #CyberSecurityNews #cybersecurity #Vulnerability #BADBOX20 #Hackread #security #android #malware #Badbox #China #IoT #TV

Android users watch out: BADBOX variant BADBOX 2.0 found preinstalled on cheap Android IoT devices worldwide, forming a botnet across 222 countries for fraud and network abuse.

Read: https://hackread.com/badbox-2-0-preinstalled-android-iot-devices-worldwide/

#CyberSecurity #Android #BADBOX #IoT #Malware

BADBOX 2.0 Targets Home Networks in Botnet Campaign, FBI Warns – Source: www.darkreading.com https://ciso2ciso.com/badbox-2-0-targets-home-networks-in-botnet-campaign-fbi-warns-source-www-darkreading-com/ #rssfeedpostgeneratorecho #DarkReadingSecurity #CyberSecurityNews #DARKReading #BadBox

Badbox 2.0: Eine Million infizierte Geräte im Botnet | heise online
https://heise.de/-10327338 #Cybercrime #Botnet #Botnetz #Badbox #Badbox2

#Badbox 2.0: Eine Million infizierte Geräte im #Botnet | Security https://www.heise.de/news/Badbox-2-0-Eine-Million-infizierte-Geraete-im-Botnet-10327338.html #Android :android: #Malware #Badbox20

Android botnet BadBox largely disrupted https://www.malwarebytes.com/blog/news/2025/03/android-botnet-badbox-largely-disrupted #playprotect #Android #BadBox #botnet #News

BadBox Botnet Powered by 1 Million Android Devices Disrupted https://www.securityweek.com/badbox-botnet-powered-by-1-million-android-devices-disrupted/ #Malware&Threats #IoTSecurity #disruption #takedown #BadBox #botnet

BadBox rapidly grows, 190,000 Android devices infected – Source: securityaffairs.com https://ciso2ciso.com/badbox-rapidly-grows-190000-android-devices-infected-source-securityaffairs-com/ #rssfeedpostgeneratorecho #informationsecuritynews #ITInformationSecurity #SecurityAffairscom #CyberSecurityNews #PierluigiPaganini #internetofthings #SecurityAffairs #SecurityAffairs #BreakingNews #SecurityNews #hackingnews #Cybercrime #hacking #Malware #BadBox #botnet #IoT

Botnet of 190,000 BadBox-Infected Android Devices Discovered – Source: www.securityweek.com https://ciso2ciso.com/botnet-of-190000-badbox-infected-android-devices-discovered-source-www-securityweek-com/ #rssfeedpostgeneratorecho #CyberSecurityNews #Malware&Threats #securityweekcom #securityweek #IoTSecurity #BadBox #botnet #IoT

Botnet of 190,000 BadBox-Infected Android Devices Discovered https://www.securityweek.com/botnet-of-190000-badbox-infected-android-devices-discovered/ #Malware&Threats #IoTSecurity #BadBox #botnet #IoT

Botnet of 190,000 BadBox-Infected Android Devices Discovered https://www.securityweek.com/botnet-of-190000-badbox-infected-android-devices-discovered/ #Malware&Threats #IoTSecurity #BadBox #botnet #IoT

A major cyber threat is on the rise! 🌍 The BADBOX malware has infected over 192,000 devices globally, spreading through compromised Android firmware. 📱🖥️ This includes smartphones, smart TVs, and more from well-known retailers. Stay vigilant! Protect your devices by buying from trusted sources and keeping software updated. 🔒 #CyberSecurity #Malware #BADBOX #TechNews #newz https://cyberinsider.com/badbox-malware-expands-global-reach-infects-192000-devices/

🚨 A new threat alert! BADBOX malware has infected 30,000 Android devices in Germany, primarily targeting outdated firmware. This malicious software can run ad fraud and spread misinformation. 🦠📱 Authorities have disrupted its operations, but be cautious when purchasing devices online! Stay safe! 🔒 #CyberSecurity #Malware #BADBOX #Android #TechNews https://www.techradar.com/pro/security/badbox-malware-hits-30-000-android-devices