# BADBOX 2.0 Page: https://stenobird.com/podcast/hacked-1089107/badbox-2-0 Text version: https://stenobird.com/podcast/hacked-1089107/badbox-2-0.md Podcast: [Hacked](https://stenobird.com/podcast/hacked-1089107) Published: 2025-11-02T03:59:00+00:00 Episode link: https://www.podtrac.com/pts/redirect.mp3/pdst.fm/e/traffic.megaphone.fm/ADV3322349669.mp3?updated=1761858953 Audio file: https://www.podtrac.com/pts/redirect.mp3/pdst.fm/e/traffic.megaphone.fm/ADV3322349669.mp3?updated=1761858953 Processing state: not_requested JSON: https://stenobird.com/v1/public/podcasts/hacked-1089107/episodes/badbox-2-0 Duration seconds: 2972 ## Resource Hh hey maybe don't buy that $14 projector off amazon. In this episode, we dive into the sequel nobody asked for: BADBOX 2.0 — the return of last year’s botnet built out of bargain-bin Android gadgets. Google just filed a lawsuit in federal court alleging that millions of sketchy streaming boxes, projectors, and mystery electronics were shipped pre-infected from factories overseas. The moment someone plugs one in, it joins a global botnet used for ad fraud, click fraud, and even to rent out your home internet connection to criminals. We talk to the team at HUMAN Security, the researchers credited in Google’s suit, about how they traced this thing across 222 countries, why it came back bigger than before, and how you even begin to kill a botnet that ships itself directly to people’s living rooms. Learn more about your ad choices. Visit podcastchoices.com/adchoices ## Actions - request_transcript: `POST https://stenobird.com/v1/public/podcasts/hacked-1089107/episodes/badbox-2-0/transcription-requests` — Idempotently request low-priority transcript generation for this episode. - read_markdown: `GET https://stenobird.com/podcast/hacked-1089107/badbox-2-0.md` — Read the agent-friendly Markdown representation of this episode resource. A page view does not enqueue transcription. Agents should invoke `request_transcript` explicitly when they need this episode processed. ## Transcript Full transcripts are not published on public pages unless there is a clear rights basis.