InfoSecBulletin Cybersecurity for mankind
Google is suing 25 unidentified cybercriminals thought to be from China for running BADBOX 2.0, a major global botnet with 10 million hacked devices. BADBOX uses internet-connected Android devices like smart TVs, streamers, digital frames, car systems, projectors, and inexpensive off-brand tablets made in China and sold worldwide.
It has infected over 10 million uncertified devices that use Android software but do not have Google’s security. On July 11th, Google sued a group called “Does 1-25” for causing serious harm.
UK to ban public sector from paying ransomware gangs
(CVE-2025-6704, CVE-2025-7624)
Urgent Sophos Firewall Update: Two Critical RCE Flaws Patched
Dell admits breach of test lab platform by World Leaks extortion group
Microsoft issues urgent patches for SharePoint RCE vulnerabilities
HPE alerts of hardcoded passwords in Aruba access points
Akira Ransomware Allegedly Compromise 12 Companies in 72 Hours
Singapore urgently engage military force to tackle ‘serious’ cyberattack
Hackers infect 10M Androids with BADBOX 2.0
Oracle Patched 200 Vulns With July 2025 CPU
Ivanti Zero-Days Exploited to Drop MDifyLoader
The lawsuit alleges that the group of cybercriminals tarnishes Google’s reputation when fraud occurs on its platforms, causing the company to expend substantial resources to detect, deter and disrupt BADBOX, which grows every day.
“Google has shown that Defendants – through their participation in, and operation of, the BadBox 2.0 Enterprise – have threatened the security of the internet, including Google platforms, by transmitting malware through the internet to configure, deploy, and operate a botnet,” the court document reads.
Cybercriminals sell access to hijacked devices to other criminals, who use them to conceal large-scale fraud and illegal activities.
“Google is entitled to recover treble damages plus costs and attorney’s fees from the Defendants,” the complaint reads.
Google announced in a blog post that it quickly responded to a threat and updated Google Play Protect to automatically block apps associated with BadBox. However, BADBOX comes preinstalled on the devices at the firmware level and cannot be easily removed. Full report here.
