Millions of Android users have been warned to switch off their devices immediately after the discovery of the BadBox malware. The bug, known as BadBox 2.0, is capable of generating revenue for cybercriminals through adware and could expose users to ransomware attacks.
Approximately 10 million devices are believed to be infected, but unlike previous warnings, this time it is not smartphones that are affected. Instead, the malware targets other Android-based gadgets such as tablets, projectors, and streaming boxes, many of which are cheap Chinese imports that come pre-loaded with the malware.
Google has filed a lawsuit against those creating and selling the infected devices. The tech giant described BadBox 2.0 as the largest known botnet of internet-connected TV devices, warning it could be used for ransomware or distributed denial-of-service (DDoS) attacks. The FBI has also urged consumers to disconnect any suspicious devices from their networks.
Known affected devices include Android TV boxes with model numbers X88 Pro 10, T95, MXQ Pro, and QPLOVE Q9. Users are advised to check if their devices are Google Play Protect-certified and to avoid off-brand gadgets from unknown manufacturers. Even after purchase, the malware can be installed via unofficial apps, so downloading only from official sources is recommended.
