BADBOX, PEACHPIT, AND THE FRAUDULENT DEVICE IN YOUR DELIVERY BOX

Summary from the TLDR InfoSec newsletter

The PEACHPIT ad fraud botnet infected hundreds of thousands of Android/iOS devices via 39 apps with over 15 million installs. Part of the China-based BADBOX operation includes backdoored off-brand mobile devices. At its peak, it had 121K Android and 159K iOS bots across 227 countries generating illicit revenue.