Germany cuts hacker access to 30,000 devices infected with BadBox malware

Category	Details
Threat Actors	BadBox hacker group, likely operating out of China.
Campaign Overview	Germany’s cybersecurity agency blocks communication for 30,000 infected devices to stop BadBox malware attacks, preventing further damage.
Target Regions (Victims)	Infected devices across Germany, primarily targeting internet-connected devices like smartphones, tablets, connected TVs, and streaming boxes.
Methodology	Sinkholing method to redirect traffic from infected devices to safe servers.
Product Targeted	Android devices (smartphones, tablets, digital streaming boxes, connected TV boxes, digital photo frames).
Malware Reference	BadBox malware embedded with Triada, allowing backdoor access for remote control and exploitation of devices.
Tools Used	Sinkholing, remote control tools, backdoor access embedded in device firmware.
Vulnerabilities Exploited	Pre-installed malware due to device firmware flaws, outdated software vulnerabilities.
TTPs	- Remote control of infected devices - Injection of additional malware - Exploiting internet connections for cyberattacks and content distribution
Attribution	German cybersecurity agency BSI, supported by measures to maintain sinkholing, targeting internet service providers with mandatory traffic redirection.
Recommendations	- Consumers advised to disconnect infected devices from the internet - Manufacturers and retailers must prevent compromised devices from reaching the market.
Source	The Record

Read full article: https://therecord.media/germany-hacker-access-malware-cut

The above summary has been generated by an AI language model