News and Analysis

HUMAN’s Satori Threat Intelligence and Research team discovered a widespread cyberattack, “BADBOX 2.0”, which infected over 1 million devices worldwide through 24 malicious apps on Google Play Store. The sophisticated botnet attack involves a backdoor access that permits hackers continual privileged access to affected devices, allowing various fraud schemes. Four threat actor groups were found to be involved in this operation. Despite preventative actions from Google, the backdoor implantation supply remains and users are urged to limit app downloads to official marketplaces.