A hot potato: The resurgence of BadBox 2.0 poses new risks that consumers should be aware of. As unregulated, low-cost IoT devices become increasingly common in households around the world, it’s essential to understand the potential dangers they present.

A new wave of cyberattacks is targeting household technology, as the FBI has issued a warning about the resurgence of the BadBox 2.0 botnet. This sophisticated network of compromised Internet of Things devices is being exploited by cybercriminals to infiltrate home networks on a massive scale, raising fresh concerns about the security of everyday smart devices. The campaign’s global footprint spans more than 220 countries and territories, with infections reported in everything from budget streaming boxes to uncertified digital photo frames.

The original BadBox operation first came to light in 2023, when security researchers discovered that certain Android-based devices – primarily off-brand, low-cost gadgets not certified by Google Play Protect – were being sold with malware embedded directly in their firmware. These devices, often manufactured in China and shipped worldwide, included streaming boxes, digital projectors, and even vehicle infotainment systems.

While the initial BadBox campaign was partially disrupted in 2024 through coordinated action by cybersecurity firms, tech companies, and international law enforcement (including a joint operation between German authorities and Google), the threat quickly adapted. The botnet evolved to bypass many of the countermeasures deployed against it, signaling a dangerous new phase in IoT-focused cybercrime.

BadBox 2.0, the latest iteration of the botnet, has proven even more insidious than its predecessor. While the original version primarily infected devices during manufacturing, BadBox 2.0 can compromise hardware both at the factory and after it reaches consumers. Devices may arrive with firmware-level backdoors already installed or become infected during initial setup if users download apps from unofficial marketplaces.

Security analysts have identified at least four interconnected groups behind the botnet – SalesTracker, MoYu, Lemon, and LongTV – each specializing in a different phase of the operation, from malware distribution to monetizing stolen data.

Once a device is compromised, it becomes part of a sprawling botnet. Cybercriminals use these infected endpoints as residential proxies, allowing them to route illicit activity through home networks and obscure their true origins. In addition to facilitating ad fraud and DDoS attacks, the botnet enables credential stuffing to hijack online accounts, intercepts one-time passwords for financial fraud, and deploys malicious code to further expand its network. The malware’s ability to execute arbitrary commands gives attackers the flexibility to repurpose infected devices for virtually any cybercriminal goal.

The roots of BadBox trace back to earlier malware such as Triada, a sophisticated Android Trojan first discovered in 2016. Triada was known for deeply embedding itself into systems and evading detection. Over the years, its tactics have evolved into the modern supply chain attacks seen in BadBox and BadBox 2.0. This lineage helps explain the botnet’s resilience and adaptability, built on nearly a decade of development and refinement.

Detecting a BadBox 2.0 infection is difficult for most consumers. The malware typically operates silently, with few obvious symptoms. Subtle signs may include the appearance of unfamiliar app stores, unexplained device overheating, or sudden changes to network settings. The FBI warns that devices advertising free access to premium content or marketed as “unlocked” pose a particularly high risk.

If a device is suspected of being infected, users should isolate it from the internet immediately, review all connected devices for unauthorized apps or activity, and consider performing a full reset or replacing the hardware.

To minimize risk, experts recommend:

• Purchasing devices certified by Google Play Protect.

• Avoiding uncertified or off-brand hardware.

• Keeping firmware and apps updated.

• Monitoring home network traffic for anomalies.

• Checking security bulletins for compromised model lists and known indicators of compromise.

The ConsenSys Web3 Survey gives us a closer look at how people around the world are getting involved with NFTs, blockchain, and other web3 technologies. This is the second global opinion survey by ConsenSys and YouGov, gathering extensive responses from more than 18,000 people across 18 countries, including nations in Africa, Asia, Europe, and the Americas.

The survey highlights that while more people are exploring Web3 activities like collecting NFTs, using crypto wallets, and playing blockchain-based games, many still don’t fully understand these technologies. It also shows that issues like data privacy and security remain big concerns.

ConsenSys Web3 Survey: More People Are Joining Web3 Activities

The survey found that 42% of people globally have bought or currently own cryptocurrencies, with some countries seeing a big jump compared to last year. Crypto ownership increased in the Philippines, Mexico, Germany, South Africa, and Japan.

NFTs are becoming more popular, too. People in Nigeria, South Africa, India, and Vietnam are the most familiar with NFTs. On the other hand, 76% of people in the UK said they’ve never owned an NFT. Still, interest in NFTs is growing, especially in Nigeria, where 94% of respondents plan to invest in them in the next year.

Participation in other Web3 activities has also gone up this year:

• Collecting NFTs: Up 3%.

• Using decentralized finance (DeFi): Up 4%.

• Playing blockchain-based games: Up 3%.

• Owning web3 wallets: Up 6%.

• Using staking services: Up 3%.

These trends show that more people are finding ways to use web3 in their daily lives. Web3 wallets, in particular, are becoming a key tool for activities like sending transactions and storing digital assets.

Source ConsenSys

Learning About Decentralization and Blockchain

The survey also looked at how well people understand decentralization and blockchain. Over half of the respondents in places like the United States, Nigeria, South Africa, and India are familiar with the idea of decentralization.

When it comes to blockchain, awareness is improving. In Nigeria, 77% of people could correctly identify what blockchain is, and 52% in South Africa did as well. However, Web3 itself is still confusing for many people. Nigerian (61%) and South African (48%) respondents were the most familiar with Web3, while people in Japan, South Korea, and Europe were the least familiar, according to the survey.

NFT Awareness and Ownership

Compared to Web3, NFTs are slightly better understood. In Asia, about 36% of people know about NFTs, and in the US, awareness is around 45%. However, the UK showed a decline in NFT ownership compared to last year, which is an interesting exception to the trend.

Globally, more awareness usually means more ownership, but regional differences suggest local factors also play a role.

However, a global majority of people aware of NFTs (65%) say they plan to invest in or collect them over the next 12 months. This trend is particularly strong in 14 out of the 18 countries surveyed, where most respondents familiar with NFTs view crypto as part of their near future.

Challenges That Hold Web3 Back

Even though Web3 is growing, it still faces challenges:

• Security is the top concern for 77% of respondents, especially when choosing crypto wallets.

• Ease of use is also important, with 74% of people saying Web3 tools need to be simpler.

• People in Africa strongly prefer wallets they control themselves, with 93% favouring self-custody wallets.

Another major issue is data privacy. Most people (83%) believe privacy is important, but less than half trust their internet service providers to handle their personal data securely. Blockchain and decentralization could offer solutions by giving people more control and transparency over their data.

What’s Next for Web3 and NFTs?

The survey shows that Web3 and NFTs are becoming more popular, but there’s still a long way to go. Many people need more education about these technologies, and governments need to provide clearer regulations to address concerns.

As more people discover the benefits of Web3 wallets, NFTs, and blockchain, the findings from this ConsenSys survey help us understand how to build a better future for these technologies. Web3 could change how we use the internet, but for that to happen, it must become safer, easier to use, and better understood.

Editor’s note: Written with the assistance of AI – Edited and fact-checked by Jason Newey.

Web3 MMORPG RavenQuest is set to launch globally on March 14 after seven years of development and two years of private beta testing.

Developed for both PC and mobile, the game combines classic role-playing elements with blockchain technology, offering players a player-driven world where they can shape their own path.

Pre-registration is currently available, allowing players to receive exclusive rewards, including 10 RavenPacks, a Bandit Companion, and an in-game title.

What is RavenQuest?

RavenQuest is an open-world MMORPG set in a vast, immersive environment where player actions, choices, and interactions directly affect the game world. Players can participate in a variety of activities such as crafting, combat, exploration, and trading, with a focus on a decentralised, player-driven economy.

One of the key features of RavenQuest is the player ownership of in-game assets. Resources, items, and even land can be owned and traded by players, making it a true play-to-earn experience.

The game integrates a wide range of gameplay mechanics, including guild wars, skill-based crafting, and large-scale PvP battles, creating an experience tailored to both casual players and competitive gamers alike.

What to expect from the global launch?

The global release of RavenQuest on March 14 will open up the full range of the game’s features to players around the world. Players can look forward to a fully decentralised in-game economy, where they will be able to craft and trade items, engage in PvP tournaments, and claim land to build and customise. The game includes several distinct gameplay mechanics:

• Guild Wars: Players can form guilds and wage battles for control over key resources in the game world.
• Crafting & Gathering: Players can specialise in various professions, such as blacksmithing, mining, and fishing, to gather materials and craft powerful items.
• Arena PvP (Solo & Duo): Player will have the option to test their skills in 1v1 and 2v2 PvP battles for exclusive rewards.
• Land Ownership & House Customisation: Virtual land is a key component of the game, with players able to own and develop properties across the world, generating income through trade and commerce.
• Ship and Wagon Customisation: Players can design and build ships and wagons to travel and transport goods, with thousands of unique combinations available.

With a focus on player-driven content, RavenQuest will evolve dynamically based on player actions. The game’s story and quests will change in response to the collective decisions of its player base, further immersing players in the world they help shape.