New malware infects millions of phones after Google warning
By
Gian T
- Replies 0
If you're someone who enjoys snapping up affordable tech deals, a recent development might give you pause.
A serious cybersecurity threat has now been linked to millions of devices commonly sold online.
Experts are urging users to stay alert as concerns grow over the potential risks hidden inside these gadgets. What seems like a simple bargain could actually open the door to malicious software without users even realising it.
BadBox 2.0 isn’t your run-of-the-mill computer virus. It’s a sophisticated botnet—a network of infected devices that cybercriminals can control remotely.
Once infected, your device can be used for all sorts of dodgy activities, from sending out spam to launching large-scale cyberattacks like ransomware or distributed denial-of-service (DDoS) attacks.
In other words, your innocent-looking TV box could be part of a global cybercrime operation without you even knowing!
Google has described BadBox 2.0 as the largest botnet of internet-connected TV devices, growing daily.
The company is so concerned that it’s taken the rare step of filing a lawsuit in New York to try and shut down the criminal enterprise behind the malware.
The malware is spreading mainly through cheap, no-name Android devices—think TV streaming boxes, tablets, and digital projectors—often manufactured in China.
Sometimes, the malware is pre-installed before you even open the box.
Other times, it sneaks in when you set up your device and download apps from unofficial app stores (those tempting 'free' apps can come with a hidden cost!).
Once infected, your device can be sold as part of a botnet to other cybercriminals, who use it as a launchpad for hacking activities worldwide, including right here in Australia.
Google’s lawsuit specifically mentions several popular Android TV box models, including:
But that’s not the full list. Security researchers at Human Security have published a more comprehensive list of affected devices, so if you recently bought a budget Android gadget, it’s worth checking their list.
The main risk comes from devices running the open-source version of Android, which doesn’t have Google’s built-in security protections.
If you’ve bought a device that doesn’t come with the official Google Play Store, be extra cautious.
Google isn’t just sitting on its hands. The company’s lawsuit aims to shut down the command-and-control servers that keep the BadBox botnet running.
They’re asking the court for a 'permanent injunction' to force internet services linked to the malware to stop supporting it.
This could help disrupt the botnet and protect millions of users. The lawsuit also names dozens of internet domains operated by big names like Cloudflare, GoDaddy, and NameCheap, which have been linked to the malware’s operations.
If you think you might have one of the affected devices, Google’s advice is blunt: consider throwing it away.
The malware can run silently in the background, generating fake clicks for mobile ads and potentially exposing you to even more serious threats.
Many over-60s embrace smart technology for entertainment, communication, and even health monitoring.
But with new tech comes new risks. Cheap devices can be tempting, but they often cut corners on security, leaving you vulnerable to scams and cybercrime.
Remember, if a deal seems too good to be true, it probably is. Investing in a trusted brand with proper security features can save you a lot of headaches down the track.
We want to hear from you! Have you bought a budget Android device recently? Noticed anything strange with your TV box or tablet? Share your experiences in the comments below.
Read more: Over 31,000 Aussie bank logins stolen and sold—are yours on the list?
A serious cybersecurity threat has now been linked to millions of devices commonly sold online.
Experts are urging users to stay alert as concerns grow over the potential risks hidden inside these gadgets. What seems like a simple bargain could actually open the door to malicious software without users even realising it.
BadBox 2.0 isn’t your run-of-the-mill computer virus. It’s a sophisticated botnet—a network of infected devices that cybercriminals can control remotely.
Once infected, your device can be used for all sorts of dodgy activities, from sending out spam to launching large-scale cyberattacks like ransomware or distributed denial-of-service (DDoS) attacks.
In other words, your innocent-looking TV box could be part of a global cybercrime operation without you even knowing!
Google has described BadBox 2.0 as the largest botnet of internet-connected TV devices, growing daily.
The company is so concerned that it’s taken the rare step of filing a lawsuit in New York to try and shut down the criminal enterprise behind the malware.
The malware is spreading mainly through cheap, no-name Android devices—think TV streaming boxes, tablets, and digital projectors—often manufactured in China.
Sometimes, the malware is pre-installed before you even open the box.
Other times, it sneaks in when you set up your device and download apps from unofficial app stores (those tempting 'free' apps can come with a hidden cost!).
Once infected, your device can be sold as part of a botnet to other cybercriminals, who use it as a launchpad for hacking activities worldwide, including right here in Australia.
Google’s lawsuit specifically mentions several popular Android TV box models, including:
- X88 Pro 10
- T95- MXQ Pro
- QPLOVE Q9
The main risk comes from devices running the open-source version of Android, which doesn’t have Google’s built-in security protections.
If you’ve bought a device that doesn’t come with the official Google Play Store, be extra cautious.
Google isn’t just sitting on its hands. The company’s lawsuit aims to shut down the command-and-control servers that keep the BadBox botnet running.
They’re asking the court for a 'permanent injunction' to force internet services linked to the malware to stop supporting it.
If you think you might have one of the affected devices, Google’s advice is blunt: consider throwing it away.
The malware can run silently in the background, generating fake clicks for mobile ads and potentially exposing you to even more serious threats.
Many over-60s embrace smart technology for entertainment, communication, and even health monitoring.
But with new tech comes new risks. Cheap devices can be tempting, but they often cut corners on security, leaving you vulnerable to scams and cybercrime.
Remember, if a deal seems too good to be true, it probably is. Investing in a trusted brand with proper security features can save you a lot of headaches down the track.
Key Takeaways
- Google has revealed that a malware called 'BadBox 2.0' has infected over 10 million Android devices worldwide, including Android TV boxes, tablets and projectors—many of which are low-cost, no-name models made in China.
- The malware can be preinstalled on devices or downloaded through unofficial app stores during setup, giving hackers the ability to sell access to infected devices for criminal activities such as hacking and cyberattacks.
- Google has launched a lawsuit in New York aiming to shut down the 'BadBox 2.0' botnet, seeking a permanent injunction against internet services and domains linked to the malware in order to disrupt the criminals’ operations.
- Owners of affected devices are being warned to consider disposing of them, as the malware can run in the background to generate fraudulent ad clicks and facilitate a range of criminal schemes.
Read more: Over 31,000 Aussie bank logins stolen and sold—are yours on the list?