Android botnet BadBox largely disrupted

Researchers and Germany’s BSI disrupted the BadBox botnet — malware preinstalled on lower-cost Android Open Source Project devices (TV boxes, tablets, projectors) that forms a proxy network used for DDoS, ad fraud, and stealing 2FA codes; sinkholing and removal of malicious apps reduced activity, but estimates suggest up to ~1 million devices may be affected and supply-chain firmware backdoors mean the threat may resurface.