InfoSecBulletin Cybersecurity for mankind
Google is suing 25 unidentified cybercriminals thought to be from China for running BADBOX 2.0, a major global botnet with 10 million hacked devices. BADBOX uses internet-connected Android devices like smart TVs, streamers, digital frames, car systems, projectors, and inexpensive off-brand tablets made in China and sold worldwide.
It has infected over 10 million uncertified devices that use Android software but do not have Google’s security. On July 11th, Google sued a group called “Does 1-25” for causing serious harm.
Citrix NetScaler SAML 0-Day Flaw Under Attack
Major Danish university breached, 200,000 users at risk
Microsoft’s X account hijacked to promote Clippy crypto scam
Critical cPanel, GitLab AI Gateway and Dell CSM Flaws Enable RCE And Admin Hijacking
Nearly 100,000 email addresses exposed in first AI-related data breach in Singapore
Hackers Exploit Zimbra Mail Servers: TeamViewer patched 5 critical flaws
Google Warns of Hackers Actively Exploiting Citrix 0-Day Flaws
CISA Warns Critical MikroTik RouterOS Flaw While Cisco SD-WAN Zero-Day Exploited in Attacks
Apple Zero-Day Exploited: Pentagon Data Breach Reportedly Exposes Sensitive Data of 3 Million People
JadePuffer Agentic AI targets and destroys Azure’s cloud resources
The lawsuit alleges that the group of cybercriminals tarnishes Google’s reputation when fraud occurs on its platforms, causing the company to expend substantial resources to detect, deter and disrupt BADBOX, which grows every day.
“Google has shown that Defendants – through their participation in, and operation of, the BadBox 2.0 Enterprise – have threatened the security of the internet, including Google platforms, by transmitting malware through the internet to configure, deploy, and operate a botnet,” the court document reads.
Cybercriminals sell access to hijacked devices to other criminals, who use them to conceal large-scale fraud and illegal activities.
“Google is entitled to recover treble damages plus costs and attorney’s fees from the Defendants,” the complaint reads.
Google announced in a blog post that it quickly responded to a threat and updated Google Play Protect to automatically block apps associated with BadBox. However, BADBOX comes preinstalled on the devices at the firmware level and cannot be easily removed. Full report here.
