Image by Kahunapule Michael Johnson, from Flickr

BadBox Malware Turns Cheap Android Devices Into Cybercrime Tools

• Written by Kiara Fabbri Former Tech News Writer
• Fact-Checked by Sarah Frazier Former Content Manager

The FBI issued a warning that millions of low-cost Android devices could transform domestic networks into criminal platforms.

In a rush? Here are the quick facts:

• BadBox malware infects millions of cheap Android devices globally.
• Devices come preloaded with malware straight from the manufacturer.
• Malware enables fraud, fake accounts, and proxy network abuse.

The devices used for streaming, in-car entertainment, and video projection contain a malware strain named BadBox, which according to Ars Technica , has existed in multiple forms since nearly a decade ago.

The powerful Trojan called Triada serves as the base for BadBox to bypass Android’s built-in security features. The cybersecurity firm Kaspersky first discovered Triada as one of the most sophisticated mobile Trojans in 2016.

Ars Technica notes that Google implemented a software update to block the malware, but it returned in 2019 as manufacturers pre-installed it on devices prior to consumer sale. Google confirmed the supply chain attack, and explained the measures they took to stop additional infections.

Security company Human Security discovered in 2023 that thousands of Android devices received pre-installed Triada-based backdoor software. Ars Technica explains that the backdoor allowed cybercriminals to execute fraudulent operations and hide illegal activities through home networks, while simultaneously generating artificial Gmail and WhatsApp accounts.

Ars Technica reports that Google, together with other tech organizations, launched a joint operation to stop the BadBox 2.0 campaign. It was reported that this campaign infected more than one million Android devices during the first half of this year.

The devices didn’t have Google Play Protect certification, and ran on Android’s open-source version, instead of Android TV. Human Security researchers identified more than twelve TV models that suffered from this issue, as reported by Ars Technica.

Despite these efforts, the FBI says the threat continues. “The public is urged to evaluate IoT devices in their home for any indications of compromise and consider disconnecting suspicious devices from their networks,” the agency said.

The FBI advises users to look for suspicious behavior such as automatic connections to untrustworthy app stores, and alerts to disable Play Protect. The safest move? Users should stay away from extremely inexpensive Android devices, especially when they come from unknown manufacturers.

Photo by Enrique Vidal Flores on Unsplash

Fans Wait In Line For Days To Get The New Nintendo Switch 2, But Some Consoles Were Damaged

• Written by Andrea Miliani Former Tech News Expert
• Fact-Checked by Sarah Frazier Former Content Manager

Nintendo released its new Nintendo Switch 2 for sale this Thursday worldwide, and fans waited in line—some of them for weeks—to get the latest console. A few customers reported that the devices delivered by the retail partner GameStop arrived damaged.

In a rush? Here are the quick facts:

• Nintendo Switch 2 launched worldwide on Thursday with a $499.99 starting price.
• Fans in NYC camped for up to two months to secure the new console.
• Some customers reported damaged units due to GameStop’s poor packaging.

The official launch, with a $499.99 starting price, took place on Thursday. U.S. stores such as GameStop and Best Buy hosted midnight openings for fans.

According to CNBC , Nintendo expects to sell 15 million consoles by the end of the year and aims to reach 100 million units sold by 2030. Considering the pre-orders and the 2.2 million applications for the Nintendo lottery in Japan, more shortages are expected.

Multiple fans in New York City waited in line for up to two months, camping in tents and taking shifts with friends and family to protect their spots, and be among the first ones to buy the device.

Target customers reached the pre-order limits within just 2 hours, and several stores ran out of stock within minutes.

However, not all customers in the U.S. were happy with the product. Multiple players reported on social media that their devices, purchased at GameStop, were damaged as the boxes were stapled and handled poorly.

“GameStop stapled the receipt for me and my friends Switch 2s to the box, FML,” wrote one user on X. “Genuinely insane now I’m gonna have to wait 3 months for the restock. And yes we were there for the midnight release, so I bet everyone in this line is gonna have this same issue.”

Users shared photos and proof of the issue. According to NBC News , GameStop stated it was investigating the matter. A few affected customers were contacted by the company and offered replacements for their damaged consoles.

Despite the high prices and uncertainty due to the U.S. government’s import tariffs, players all over the world showed up at the stores and shared their excitement to get the highly anticipated device.