A gigantic botnet network from Android devices was destroyed
The information security experts from Akamai, Flashpoint, Cloudflare, Oracle Dyn, RiskIQ, and Team Cymru jointly decommissioned the large bot network of Android devices called WireX.
The Zombie Network was used to carry out massive DDoS attacks against representatives from a variety of areas including the hotel and gambling business, the porn industry, and domain name registrars. Google has received information about this threat a few days ago and has fully verified the Play Store for WireX availability. After the investigation, 300 apps used by hackers to remove Android devices and their merging into botnets were removed. Now Google removes WireX from infected devices around the world. There is currently no data on the exact number of infected Android devices. WireX appeared on Aug. 2, 2017, and was unnoticed by August 15, when specialists noticed that botnets were used in prolonged DDoS attacks. In some cases, attacks have involved up to 70,000 IP addresses from more than 100 countries. According to experts, the use of so many mobile devices from different countries is quite unusual. The blog of specialists states that WireX has generated traffic mainly from HTTP GET queries to actual clients and browsers.