The Badbox botnet is back, powered by up to a million backdoored Androids

Human Security's Satori team has identified Badbox 2.0, a remote-controllable Android/AOSP malware variant infecting cheap, China-made devices (phones, TV boxes, tablets, projectors) and hundreds of third-party Android apps to build a botnet that conducted large-scale ad fraud, ad-click fraud, and credential theft; the botnet peaked at nearly one million devices but has been partially disrupted by coordination between Human Security, Google, Trend Micro, and Shadowserver.