Archived (in German)

Germany’s Federal Office for Information Security (BSI) sinkholed internet traffic originating from Germany and going to the command and control servers of the BADBOX malware group, BSI writes on its website.

The malware was first detected in October 2023 by Human Security, a company specialized in detecting advertising fraud. The BADBOX group, which originates from China, assembled a botnet of over 280,000 systems by hiding its malware in malicious Android and iOS apps and inside the firmware of Android TV streaming boxes.

Human Security said the BADBOX group operated out of China and most likely had access to hardware supply chains where its members could deploy the malicious firmware on streaming boxes. BADBOX affects consumers from both the public and private sector.

The BSI says all German internet service providers with over 100,000 clients are now mandated by law to redirect BADBOX traffic to its sinkhole. A sinkhole is a server designed to capture malicious traffic and prevent control of infected devices by the criminals who infected them.

It is reportedly the first time the German BSI has sinkholed a malware operation on its own. Prior to that, the BSI did this as part of international efforts targeting cybercrime operations.

5 points

They should force a recall.

permalink
report
reply
5 points
*

A recall of cheap Android streaming boxes dropshipped from China? Ha!

permalink
report
parent
reply
1 point

If not the chineese manufacturer, then whoever is importing them .

permalink
report
parent
reply
5 points

You don’t understand. The end user is the importer. That’s the whole idea behind aliexpress, temu and others. They don’t need to adhere to any local laws because the customer directly shops on the Chinese website.

permalink
report
parent
reply
1 point

Yeah, those streaming boxes were always problematic I used to have one years ago and detected suspicious traffic Pulled it out immediately

permalink
report
reply

Technology

!technology@beehaw.org

Create post

A nice place to discuss rumors, happenings, innovations, and challenges in the technology sphere. We also welcome discussions on the intersections of technology and society. If it’s technological news or discussion of technology, it probably belongs here.

Remember the overriding ethos on Beehaw: Be(e) Nice. Each user you encounter here is a person, and should be treated with kindness (even if they’re wrong, or use a Linux distro you don’t like). Personal attacks will not be tolerated.

Subcommunities on Beehaw:


This community’s icon was made by Aaron Schneider, under the CC-BY-NC-SA 4.0 license.

Community stats

  • 2.5K

    Monthly active users

  • 3.1K

    Posts

  • 55K

    Comments