{"id":54034,"date":"2023-10-09T01:27:10","date_gmt":"2023-10-09T01:27:10","guid":{"rendered":"https:\/\/www.threatshub.org\/blog\/chinese-smart-tv-boxes-infected-with-malware-in-peachpit-ad-fraud-campaign\/"},"modified":"2023-10-09T01:27:10","modified_gmt":"2023-10-09T01:27:10","slug":"chinese-smart-tv-boxes-infected-with-malware-in-peachpit-ad-fraud-campaign","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/chinese-smart-tv-boxes-infected-with-malware-in-peachpit-ad-fraud-campaign\/","title":{"rendered":"Chinese smart TV boxes infected with malware in PEACHPIT ad fraud campaign"},"content":{"rendered":"

Infosec in brief<\/span> Bot defense software vendor Human Security last week detailed<\/a> an attack that “sold off-brand mobile and Connected TV (CTV) devices on popular online retailers and resale sites \u2026 preloaded with a known malware called Triada.”<\/p>\n

Human named the campaign to infect and distribute the Android devices BADBOX. The infected devices were sold for under $50. Human’s researchers found over 200 models with pre-installed malware, and when it went shopping for seven particular devices found that 80 percent of units were infected with BADBOX.<\/p>\n

Analysis of infected devices yielded intel on an ad fraud module Human’s researchers named PEACHPIT. At its peak, PEACHPIT ran on a botnet spanning 121,000 devices a day on Android. The attackers also created malicious iOS apps, which ran on 159,000 Apple devices a day at the peak of the PEACHPIT campaign.<\/p>\n