When you purchase through links on our site, we may earn an affiliate commission.Heres how it works.
All of these devices are manufactured in mainland China and shipped globally, the researchers explained.
Sinkholing the domains
BadBox is a piece of malware that turns infected Android devices into residential proxies.
They are used in ad fraud, credential stuffing, and other forms of cybercrime.
No one knows exactly how these devices ended up being infected.
In any case, these are overwhelmingly low-price-point, off-brand, or uncertified devices.
German authorities recently disrupted the operation within its borders, but that only sidetracked it a little.
Given its size and resilience, security researchers from HUMAN dubbed it BadBox 2.0.
