BadBox Malware Compromises 30,000 Devices in Germany

Category	Details
Threat Actors	Cybercriminals operating Command and Control (C2) infrastructure.
Campaign Overview	BadBox malware campaign affected over 30,000 IoT Android devices in Germany by pre-installing malware in device firmware.
Target Regions (Or Victims)	Victims primarily in Germany; devices included digital photo frames, media players, and possibly smartphones.
Methodology	Malware embedded in firmware; connects to C2 servers for instructions, including stealing data, spreading misinformation, and committing advertising fraud.
Product Targeted	IoT devices running outdated Android firmware.
Malware Reference	BadBox malware.
Vulnerabilities Exploited	Outdated Android firmware and insecure supply chain practices.
TTPs	- Embedding malware in device firmware. - Using infected devices for residential proxying and IP masking. - Advertising fraud and spreading misinformation.
Attribution	Not explicitly mentioned; linked to C2 operators and cybercriminals.
Recommendations	- Purchase devices from reputable manufacturers. - Use devices with long-term security support. - Regularly check for suspicious activity.
Source	SOCRadar

Read full article: https://socradar.io/badbox-malware-compromises-30000-devices-in-germany/

The above summary has been generated by an AI language model