BadBox rapidly grows, 190,000 Android devices infected - Security Affairs

Bitsight researchers discovered a botnet of over 190,000 Android devices infected with the BADBOX bot, primarily Yandex smart TVs and Hisense smartphones. The botnet, which includes 160,000 previously unseen devices, sends telemetry to a C2 server upon boot, awaiting instructions. The BADBOX malware, pre-installed on devices, creates email and messaging accounts for spreading disinformation, conducts ad fraud, and operates as a residential proxy.