Kimwolf Botnet Lurking in Corporate, Govt. Networks

https://krebsonsecurity.com/2026/01/kimwolf-botnet-lurking-in-corporate-govt-networks/

#InternetofThings(IoT) #LatestWarnings #TheComingStorm #DDoS-for-Hire #WebFraud2.0 #RileyKilmer #BadBox2.0 #Synthient #Infoblox #Kimwolf #IPidea #Spur

The Kimwolf Botnet is Stalking Your Local Network

https://krebsonsecurity.com/2026/01/the-kimwolf-botnet-is-stalking-your-local-network/

#krebsfiveheadindustries #AkamaiTechnologies #AndroidDebugBridge #residentialproxy #ALittleSunshine #LatestWarnings #DDoS-for-Hire #HUMANSecurity #Kimwolfbotnet #Aisurubotnet #WebFraud2.0 #BenBrundage #LindsayKaye #RileyKilmer #ChadSeaman #BadBox2.0 #Synthient #922Proxy #Uhaleapp #Kimwolf #Oxylabs #Aisuru #IPidea #Quokka #911s5 #Spur #XLab

Is Your Android TV Streaming Box Part of a Botnet?

https://krebsonsecurity.com/2025/11/is-your-android-tv-streaming-box-part-of-a-botnet/

#SuperMediaTechnologyCompanyLtd. #ElectronicFrontierFoundation #FederalBureauofInvestigation #InternetofThings(IoT) #HalfSpaceLabsLimited #BadBox2.0Enterprise #GrassOpCo(BVI)Ltd #LowerTribecaCorp. #ALittleSunshine #ARPpoisoning #WebFraud2.0 #RileyKilmer #WyndNetwork #SuperCaja #Synthient #Superbox #BestBuy #Tcpdump #Walmart #Amazon #Censys #IPidea #Netcat

So I wanted to see if the 19€ smartwatch companion app "Colmi Fit" phones home.

I couldn't resist it after @Edent ~recommended~ tested it in https://shkspr.mobi/blog/2025/08/i-bought-a-16-smartwatch-just-because-it-used-usb-c/#app

The app itself seems fine (I had to apk-mitm it), but I got an Android.BadBox2 malware report from #Vodafone two days later! Turns out, my ProxyDroid test phone had an infected APK of "Sensor Box" (imoblife.androidsensorbox) on it!

Thanks @certbund and @shadowserver for your excellent work!

#Android #BadBox2 #Malware

‼️ Mindestens 10 Millionen Android-Geräte weltweit sind laut #FBI von der #Malware #BadBox2.0 betroffen.

Die #Schadsoftware ist oft bereits beim Kauf in günstigen, meist aus #China stammenden #SmartDevices wie #Streamingboxen oder digitalen #Bilderrahmen vorinstalliert.

Sie ermöglicht kriminelle Aktivitäten wie #Klickbetrug oder #Botnet-Steuerung. Die #FBI empfiehlt, verdächtige Geräte sofort vom Internet zu trennen.

https://www.forbes.com/sites/daveywinder/2025/07/26/fbi-warning-to-10-million-android-users---disconnect-from-internet-now/

#Android #IoT #ITSecurity #Malware #Cybercrime

#Google taking legal action against #BadBox2.0 #botnet #BadBox
https://www.elevenforum.com/t/google-taking-legal-action-against-badbox-2-0-botnet.38036/

BADBOX 2.0 is stealthily infiltrating millions of our everyday devices—from cheap TV boxes to top-brand smartphones. Could your gadget be compromised without you knowing? Read on to see how this evolving threat is reshaping our digital security.

https://thedefendopsdiaries.com/badbox-20-a-growing-threat-in-android-malware/

#badbox2.0
#androidmalware
#cybersecurity
#malwarethreat
#infosectrends

Badbox 2.0: Eine Million infizierte Geräte im Botnet | heise online
https://heise.de/-10327338 #Cybercrime #Botnet #Botnetz #Badbox #Badbox2