Malware
malware:badbox_2_0
Later designation used for the BadBox-related Android device malware activity discussed in the episode.
Later designation used for the BadBox-related Android device malware activity discussed in the episode.
“it’s still BadBox, but it’s BadBox 2.0”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| outgoing | VARIANT_OF | BadBox | Explicit | 172 |
| incoming | ASSOCIATED_WITH | SuperBox | Explicit | 172 |
BadBox 2.0 VARIANT_OF BadBox
The episode says the newer malware was designated BadBox 2.0 even though the first BadBox had been shut down.
Explicit Confidence 99% · Jack Rhysider EP 172 Details
“it’s still BadBox, but it’s BadBox 2.0 even though we had shut down the first BadBox.”
SuperBox ASSOCIATED_WITH BadBox 2.0
D3ada55 identifies the SuperBox as part of what was being called the BadBox botnet, specifically in the BadBox 2.0 context.
Explicit Confidence 97% · D3ada55 EP 172 Details
“this thing was part of what’s now referred to as the BadBox botnet.”