See how BADBOX 2.0 Botnet Impacted 10M Android Devices

The botnet transforms compromised devices into a massive residential proxy network, facilitating credential theft, ad fraud, and DDoS attacks while concealing the source of malicious traffic. The distributed nature of this infrastructure makes detection and takedown challenging.

Google has initiated legal action in a New York federal court against 25 unnamed Chinese entities allegedly behind the BADBOX 2.0 botnet, which has infected over 10 million Android devices globally. This advanced malware targets uncertified Android Open Source Project (AOSP) devices, which lack Google's security frameworks and updates, leaving users highly vulnerable.

BADBOX 2.0 likely exploits unpatched vulnerabilities, such as CVE-2023-28564 or CVE-2023-28563, highlighting the danger of outdated Android builds. Google’s legal move aims to cripple the botnet’s operations and sets a strong precedent for corporate responses to global cybercrime.

Users are urged to verify device certification, avoid sideloading apps, install updates, and use mobile security tools. Developers and manufacturers must prioritize security patches, Google certification, and robust supply chain protection. 

This case underscores the urgent need for enhanced mobile security standards, especially for devices running open-source Android platforms.