Link Centre - Search Engine and Internet Directory

Helping to share the web since 1996

Google Sues to Dismantle BadBox 2.0 Botnet Infecting 10+ Million Android Devices

A security and privacy dashboard with its status.

A massive Android-based malware operation dubbed “BadBox 2.0” has infiltrated over 10 million devices globally—including Android TV streaming boxes, tablets, and digital projectors—according to a recent announcement by Google.

Google has taken decisive action to combat the growing threat. On Thursday, the company filed a lawsuit in New York in an effort to dismantle what it calls a dangerous botnet operation. Described as the largest known botnet targeting internet-connected TV devices, BadBox 2.0 could, without warning, be used for large-scale cyberattacks such as ransomware and distributed denial-of-service (DDoS) attacks, Google warned in its court filings.

The FBI also issued a public alert last month, cautioning users about the malware’s rapid spread, initially reported by cybersecurity researchers in March. At that time, the FBI noted that millions of devices had been compromised, although it did not provide specific numbers.

BadBox 2.0 primarily infects inexpensive, generic Android products often manufactured in China. In some instances, the malware comes pre-installed on devices. In others, it sneaks in through third-party apps during setup when users download software from unofficial app stores. Once infected, the devices can be rented out to other cybercriminals, who use them as a base for launching digital attacks across borders.

In its legal filing, Google listed several affected models, including the X88 Pro 10, T95, MXQ Pro, and QPLOVE Q9 Android TV boxes. A more detailed list has been published by cybersecurity firm Human Security.

According to Google, BadBox exploits Android’s open-source ecosystem, which lacks the built-in security protections available in official Google-certified versions. The company says that at least 25 individuals or organizations linked to this operation are believed to be based in China.

As part of the lawsuit, Google is asking the court for a permanent injunction to cut off internet services and infrastructure supporting the malware network. If granted, this legal move could cripple BadBox’s ability to continue spreading and help protect millions of users worldwide.

Newer Articles

Older Articles

Back to news headlines