BadBox 2.0 malware has infected millions of IoT devices worldwide, forming a botnet used for cybercrime, the FBI warns.
In a Public Service Announcement, the FBI revealed that cybercriminals are exploiting the BADBOX 2.0 botnet to target IoT devices on home networks. These include streaming devices, projectors, and infotainment systems, mainly manufactured in China. Attackers gain unauthorized access through security weaknesses, often by pre-installing malicious software before purchase or infecting devices during the app download and setup process.
The FBI alert explains that once these infected IoT devices connect to home networks, they become part of the BADBOX 2.0 botnet and may be used as residential proxy services for illegal activities.
BADBOX 2.0 is the updated version of the BADBOX operation, which was disrupted in 2024. It primarily targets Android devices before purchase or through malicious apps, controlling millions of devices to create backdoors that cybercriminals exploit or sell access to compromised home networks.
The FBI advises users to watch for signs of infection and disconnect any suspicious devices. Warning signs include suspicious marketplaces for apps, requests to disable Google Play Protect, generic streaming devices claiming to be unlocked or offering free content, IoT devices from unknown brands, Android devices without Play Protect certification, and unusual internet traffic.
To protect against unauthorized residential proxy networks, the FBI recommends monitoring home network traffic, checking IoT devices for suspicious behavior, avoiding unofficial app stores, and keeping all systems updated by promptly applying patches for known vulnerabilities.
Found this article interesting? Follow us on X(Twitter) ,Threads and FaceBook to read more exclusive content we post.
