Google Takes Legal Action Against BadBox 2.0 Botnet Targeting Android Devices
Google has launched a lawsuit against the operators of BadBox 2.0, believed to be the largest smart TV botnet in the world. The tech giant alleges that the China-based botnet compromised over 10 million uncertified devices, including TV streaming boxes, tablets, and projectors.
According to Google, cybercriminals pre-installed malware or used malicious apps to infect devices running open-source Android software. These compromised devices were then weaponized for large-scale ad fraud and other digital crimes. In response, Google has updated Google Play Protect to automatically block known apps linked to BadBox 2.0. The company is also seeking an injunction against the botnet’s operators and unspecified damages.
The FBI has joined efforts to dismantle BadBox 2.0, issuing an alert last month about the operation. This follows the takedown of the original BadBox botnet in 2024, which similarly targeted Android operating systems.
Google has a history of combating large-scale botnets. In 2021, it disrupted Glupteba, a massive botnet affecting around one million Windows PCs. The latest lawsuit underscores the ongoing battle against cybercriminal networks exploiting vulnerable devices.
The case highlights the risks of using uncertified hardware, particularly those running modified Android software. Consumers are urged to stick to trusted devices and keep security features like Google Play Protect enabled to mitigate such threats.
