New malware infects millions of phones after Google warning

If you're someone who enjoys snapping up affordable tech deals, a recent development might give you pause.

A serious cybersecurity threat has now been linked to millions of devices commonly sold online.

Experts are urging users to stay alert as concerns grow over the potential risks hidden inside these gadgets. What seems like a simple bargain could actually open the door to malicious software without users even realising it.


BadBox 2.0 isn’t your run-of-the-mill computer virus. It’s a sophisticated botnet—a network of infected devices that cybercriminals can control remotely.

Once infected, your device can be used for all sorts of dodgy activities, from sending out spam to launching large-scale cyberattacks like ransomware or distributed denial-of-service (DDoS) attacks.


1752807931747.png
Google reveals ‘BadBox 2.0’ malware infects over 10 million Android devices, mostly cheap models made in China. Credit: Depositphotos


In other words, your innocent-looking TV box could be part of a global cybercrime operation without you even knowing!

Google has described BadBox 2.0 as the largest botnet of internet-connected TV devices, growing daily.

The company is so concerned that it’s taken the rare step of filing a lawsuit in New York to try and shut down the criminal enterprise behind the malware.


The malware is spreading mainly through cheap, no-name Android devices—think TV streaming boxes, tablets, and digital projectors—often manufactured in China.

Sometimes, the malware is pre-installed before you even open the box.

Other times, it sneaks in when you set up your device and download apps from unofficial app stores (those tempting 'free' apps can come with a hidden cost!).

Once infected, your device can be sold as part of a botnet to other cybercriminals, who use it as a launchpad for hacking activities worldwide, including right here in Australia.

Google’s lawsuit specifically mentions several popular Android TV box models, including:
  • X88 Pro 10
  • T95- MXQ Pro
  • QPLOVE Q9

But that’s not the full list. Security researchers at Human Security have published a more comprehensive list of affected devices, so if you recently bought a budget Android gadget, it’s worth checking their list.

The main risk comes from devices running the open-source version of Android, which doesn’t have Google’s built-in security protections.

If you’ve bought a device that doesn’t come with the official Google Play Store, be extra cautious.

Google isn’t just sitting on its hands. The company’s lawsuit aims to shut down the command-and-control servers that keep the BadBox botnet running.

They’re asking the court for a 'permanent injunction' to force internet services linked to the malware to stop supporting it.


This could help disrupt the botnet and protect millions of users. The lawsuit also names dozens of internet domains operated by big names like Cloudflare, GoDaddy, and NameCheap, which have been linked to the malware’s operations.

If you think you might have one of the affected devices, Google’s advice is blunt: consider throwing it away.

The malware can run silently in the background, generating fake clicks for mobile ads and potentially exposing you to even more serious threats.

Many over-60s embrace smart technology for entertainment, communication, and even health monitoring.

But with new tech comes new risks. Cheap devices can be tempting, but they often cut corners on security, leaving you vulnerable to scams and cybercrime.

Remember, if a deal seems too good to be true, it probably is. Investing in a trusted brand with proper security features can save you a lot of headaches down the track.
Key Takeaways
  • Google has revealed that a malware called 'BadBox 2.0' has infected over 10 million Android devices worldwide, including Android TV boxes, tablets and projectors—many of which are low-cost, no-name models made in China.
  • The malware can be preinstalled on devices or downloaded through unofficial app stores during setup, giving hackers the ability to sell access to infected devices for criminal activities such as hacking and cyberattacks.
  • Google has launched a lawsuit in New York aiming to shut down the 'BadBox 2.0' botnet, seeking a permanent injunction against internet services and domains linked to the malware in order to disrupt the criminals’ operations.
  • Owners of affected devices are being warned to consider disposing of them, as the malware can run in the background to generate fraudulent ad clicks and facilitate a range of criminal schemes.
We want to hear from you! Have you bought a budget Android device recently? Noticed anything strange with your TV box or tablet? Share your experiences in the comments below.

Read more: Over 31,000 Aussie bank logins stolen and sold—are yours on the list?
 

Seniors Discount Club

Sponsored content

Info
Loading data . . .

Join the conversation

News, deals, games, and bargains for Aussies over 60. From everyday expenses like groceries and eating out, to electronics, fashion and travel, the club is all about helping you make your money go further.

Seniors Discount Club

The SDC searches for the best deals, discounts, and bargains for Aussies over 60. From everyday expenses like groceries and eating out, to electronics, fashion and travel, the club is all about helping you make your money go further.
  1. New members
  2. Jokes & fun
  3. Photography
  4. Nostalgia / Yesterday's Australia
  5. Food and Lifestyle
  6. Money Saving Hacks
  7. Offtopic / Everything else
  • We believe that retirement should be a time to relax and enjoy life, not worry about money. That's why we're here to help our members make the most of their retirement years. If you're over 60 and looking for ways to save money, connect with others, and have a laugh, we’d love to have you aboard.
  • Advertise with us

User Menu

Enjoyed Reading our Story?

  • Share this forum to your loved ones.
Change Weather Postcode×
Change Petrol Postcode×