"PEACHPIT Unveiled: Massive Ad Fraud Botnet Infects Android and iOS Devices"

The PEACHPIT ad fraud botnet, part of the larger BADBOX operation, has been using hundreds of thousands of compromised Android and iOS devices to generate illicit profits. The botnet, discovered by HUMAN, was found in 227 countries and territories and infected devices through 39 apps installed over 15 million times. The malware allowed the operators to steal sensitive data, create residential proxy exit peers, and commit ad fraud. The Android devices are suspected to have been compromised through a hardware supply chain attack. Apple and Google have worked with HUMAN to disrupt the operation, but the attackers are likely adjusting their tactics to evade detection.