The tablet conqueror and the links between major Android botnets

A new Android backdoor called Keenadu has been discovered embedded in the firmware of several tablet brands. It infects the libandroid_runtime.so library during firmware building, injecting itself into every app launched on the device. Keenadu provides attackers unrestricted control over victims' devices, primarily for ad fraud purposes. The investigation revealed connections between Keenadu and other major Android botnets like Triada, BADBOX, and Vo1d. The malware was found in system apps, Google Play apps, and modified versions of popular apps. Over 13,000 users worldwide have been affected, with Russia, Japan, Germany, Brazil and the Netherlands seeing the highest number of infections.

Pulse ID: 6994616c344268c9e9708b53
Pulse Link: https://otx.alienvault.com/pulse/6994616c344268c9e9708b53
Pulse Author: AlienVault
Created: 2026-02-17 12:39:08

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#Android #BADBOX #BackDoor #Brazil #CyberSecurity #ELF #Germany #Google #GooglePlay #InfoSec #Japan #Malware #OTX #OpenThreatExchange #Russia #TheNetherlands #bot #botnet #AlienVault

Who Operates the #Badbox 2.0 #Botnet?

https://krebsonsecurity.com/2026/01/who-operates-the-badbox-2-0-botnet/

#cybersecurity

🤖 #Badbox war zeitweilig mit bis zu 58 % der infizierten Geräte das größte aktive #Botnetz in #Deutschland. Das Besondere: Die Schadsoftware wurde bereits während der Produktion in #Android-Geräte wie TV‑Boxen, Tablets und digitale Bilderrahmen eingeschleust.

⚠️ Die schiere Anzahl der kompromittierten Geräte macht unter anderem Badbox zu einer der ernst zu nehmenden Bedrohungen für die globale #Cybersicherheit.

📊 Mehr zu dem Thema im #BSILagebericht2025 👉️ https://www.bsi.bund.de/Lagebericht

#reminder Das #BADBOX-Botnetz bedroht über 30.000 Android-Geräte weltweit 🚨🔒. Cyberkriminelle nutzen gekaperte Geräte für Angriffe und Datenschutzrisiken. Mehr dazu vom BSI: https://www.bsi.bund.de/DE/Themen/Verbraucherinnen-und-Verbraucher/Cyber-Sicherheitslage/Methoden-der-Cyber-Kriminalitaet/Botnetze/Steckbriefe-aktueller-Botnetze/Steckbriefe/BADBOX/badbox_node.html/ #CyberSecurity #Botnet 🛡️ #xiaomi

Falls der Link nicht geht
https://archive.ph/HmHtP

Hallo, ist das hier relevant? Ich habe keinen Traffic hier auf Port 4917...

Vodafone schickte mir bereits dreimal diese Mail:

"Vodafone Kd.-Nr.: XXXXXXX - wiederholte Sicherheitswarnung - Schadsoftware-Infektion android.badbox2"

Oder ist das KI-Spam? Ich kann keine Spuren einer Infektion finden, habe auch keine der beschriebenen Devices im Einsatz.. seltsam
#botnet #security #android #badbox #vodafone

Google klagt gegen Betreiber des #BadBox 2.0-Botnets, das über zehn Millionen Android-Geräte infiziert hat. Die Cyberkriminellen nutzen die kompromittierten Geräte für Werbebetrug und als Proxy-Netzwerk. https://winfuture.de/news,152376.html?utm_source=Mastodon&utm_medium=ManualStatus&utm_campaign=SocialMedia

Google Sues Operators of a 10 Million Device Android Set-Top Box Botnet

https://torrentfreak.com/google-sues-operators-of-a-10-million-device-android-set-top-box-botnet-250721/

#IPTVandStreaming #Androidbox #Lawsuits #badbox #botnet #google

#Google taking legal action against #BadBox2.0 #botnet #BadBox
https://www.elevenforum.com/t/google-taking-legal-action-against-badbox-2-0-botnet.38036/

Android users watch out: BADBOX variant BADBOX 2.0 found preinstalled on cheap Android IoT devices worldwide, forming a botnet across 222 countries for fraud and network abuse.

Read: https://hackread.com/badbox-2-0-preinstalled-android-iot-devices-worldwide/

#CyberSecurity #Android #BADBOX #IoT #Malware

El #malware está ahí antes de que instalemos el dispositivo. No nos podemos fiar de cualquier fabricante. Miles de dispositivos #Android llevan instalado #Badbox de fábrica 😩 . https://www.europapress.es/portaltic/ciberseguridad/noticia-alemania-advierte-malware-badbox-preinstalado-mas-30000-dispositivos-iot-android-20241219134406.html
😞

Problemi di sicurezza su dispositivi Android smart home...

BadBox 2.0 sfrutta i dispositivi della smart home per attività criminali

Leggi l'articolo originale su ZEUS News: -https://www.zeusnews.it/n.php?c=31080

#sicurezza #security #virus #firmware #app #smarttv #smarthome #android #BadBox #badbox20 #Triada #Google #malware #proxy #cina

#BadBox 2.0 botnet infects millions of IoT devices worldwide, #FBI warns
https://securityaffairs.com/178789/malware/badbox-2-0-botnet-infects-millions-of-iot-devices-worldwide-fbi-warns.html
#securityaffairs #hacking #malware

Badbox 2.0: Eine Million infizierte Geräte im Botnet | heise online
https://heise.de/-10327338 #Cybercrime #Botnet #Botnetz #Badbox #Badbox2

#Badbox 2.0: Eine Million infizierte Geräte im #Botnet | Security https://www.heise.de/news/Badbox-2-0-Eine-Million-infizierte-Geraete-im-Botnet-10327338.html #Android :android: #Malware #Badbox20

#BadBox Android malware botnet has been disrupted again by removing 24 malicious apps from Google Play and sinkholing communications for half a million infected devices. #MalwareBotnet #Android https://www.bleepingcomputer.com/news/security/badbox-malware-disrupted-on-500k-infected-android-devices/

BadBox Malware Is Making Its Way Onto Third-Party Devices

https://www.makeuseof.com/nasty-android-malware-targeting-certain-devices/

https://www.bsi.bund.de/DE/Service-Navi/Presse/Pressemitteilungen/Presse2024/241212_Badbox_Sinkholing.html

#android #malware #badbox #bsi #eu #cybersecurity

#BadBox rapidly grows, 190,000 #Android devices infected
https://securityaffairs.com/172191/breaking-news/190000-android-devices-infected-by-badbox.html
#securityaffairs #hacking #malware

Badbox-malware: een groeiende dreiging voor android-apparaten wereldwijd https://www.trendingtech.news/trending-news/2024/12/50254/badbox-malware-een-groeiende-dreiging-voor-android-apparaten-wereldwijd #BadBox #Android malware #botnet #cyberbeveiliging #BitSight #Trending #News #Nieuws

A major cyber threat is on the rise! 🌍 The BADBOX malware has infected over 192,000 devices globally, spreading through compromised Android firmware. 📱🖥️ This includes smartphones, smart TVs, and more from well-known retailers. Stay vigilant! Protect your devices by buying from trusted sources and keeping software updated. 🔒 #CyberSecurity #Malware #BADBOX #TechNews #newz https://cyberinsider.com/badbox-malware-expands-global-reach-infects-192000-devices/