There’s a scary new Android threat targeting consumers and it’s worth checking your devices aren’t one of those affected – if it is, you must pull the plug immediately. This time around it’s not smartphones that are on the hit list. Instead, cyber thieves have turned their attention to devices such as cheap TV set-top boxes, tablets and digital projectors being made in China.
These often look like an online bargain due to the low cost, but buying one now comes with a serious warning as millions are thought to be infected with the so-called BadBox malware.
In fact, some are even pre-installed with bug meaning the minute it arrives and consumers switch it on they are instantly in danger.
Badbox 2.0 is fully capable of running malicious software, which can not only run advertising fraud but also more worrying attacks, including ransomware, where users are often asked to pay a fee to stop data being leaked.
Google is now trying to shut down this illegal operation. The US technology giant is filing a lawsuit against those creating and selling dodgy Android-powered devices with this malware installed.
“This botnet—called the ‘BadBox 2.0’ botnet—is already the largest known botnet of internet-connected TV devices, and it grows each day,” Google confirmed.
“Without warning, it could be used to commit more dangerous cybercrimes, such as ransomware or distributed denial-of-service (‘DDoS’) attacks.”
The FBI is also urging consumers to be aware and turn things off with the law enforcement agency saying, “The public is urged to evaluate IoT devices in their home for any indications of compromise and consider disconnecting suspicious devices from their networks.”
Some of the known devices that have been infected include Android TV boxes with model numbers X88 Pro 10, T95, MXQ Pro, and QPLOVE Q9.
If you think you have purchased a cheap Android-powered set-top box – especially one mentioned above – it’s worth checking to see if it Google Play Protect-certified. If it’s not, be warned.
Before buying a new device, it’s also worth avoiding off-brand gadgets that aren’t from a known manufacturer, as they could be targeted by Badbox 2.0.
This malware can also be added after the box is installed in homes so be careful when downloading apps and only access software from official marketplaces.
Google hopes its latest legal action will break up the gangs and keep consumers safe.
“This lawsuit enables us to further dismantle the criminal operation behind the botnet, cutting off their ability to commit more crime and fraud,” Google added.
However, this is not a good time to let you guard down.