Hagia Triada

HUMAN Disrupts Digital Supply Chain Threat Actor Scheme Originating from China

Retrieved on: 
Wednesday, October 4, 2023

HUMAN’s Satori Threat Intelligence and Research Team observed more than 74,000 Android-based mobile phones, tablets, and CTV boxes showing signs of infection.

Key Points: 
  • HUMAN’s Satori Threat Intelligence and Research Team observed more than 74,000 Android-based mobile phones, tablets, and CTV boxes showing signs of infection.
  • Dubbed BADBOX by HUMAN Security, the scheme utilizes Triada malware, first uncovered in 2016, as a “backdoor” on physical devices such as CTV boxes, smartphones, and tablets running Android during the supply chain process in China.
  • HUMAN partnered with members of the Human Collective and its extended network and others to achieve a widespread disruption of the PEACHPIT scheme.
  • To learn more about the BADBOX operation, visit the HUMAN blog and read the full technical report .