“Both the FBI and Google say they are hunting for the people behind Badbox 2.0, and thanks to bragging by the Kimwolf botmasters we may now have a much clearer idea.”
Krebs traces 10 million infected Android TV boxes back to two operators in Beijing. The trail? QQ email addresses, breached password databases, and archived websites. Classic OSINT work. The botmasters got sloppy, someone compromised their control panel, and now we have names. Whether anyone actually does anything about it is another question.