The German agency BSI has sinkholed a botnet composed of 30,000 devices infected with BadBox malware pre-installed.The BSI blocked communication between the infected devices and the C2 server, isolating the malware.BadBox malware conducts ad fraud, creates email accounts for spreading disinformation, and operates as a residential proxy.At least 74,000 Android-based devices worldwide were shipped with the backdoored firmware.