In a blog post, Google confirmed the company filed a lawsuit in the U.S. against the group - which runs a sophisticated malware network that has infected millions of Android devices worldwide - to dismantle the botnet and hold those responsible accountable.

The company said in a statement: “BadBox 2.0 is one of the most persistent and widespread malware campaigns targeting Android devices in recent years.

“By taking legal action, we are disrupting its infrastructure and protecting users around the globe.”

The botnet reportedly spreads through malicious apps distributed outside of the Google Play Store, tricking users into downloading them by posing as legitimate software.

Once installed, the malware can steal sensitive data, display intrusive ads, and even take control of the infected device.

According to Google, BadBox 2.0 is an evolution of the original BadBox botnet, with enhanced evasion techniques designed to bypass detection.

Google explained: “We have identified and disabled multiple command-and-control servers associated with the botnet, and we will continue to work with industry partners to neutralise this threat.”

Google has already deployed Play Protect updates to block malicious apps linked to BadBox 2.0.

The company is also urging Android users to only install apps from trusted sources like the Play Store and to keep their devices updated with the latest security patches.

Google added: “Our mission is to make the internet safer for everyone.

“This lawsuit sends a strong message that we will not tolerate cybercriminals exploiting our users or platforms.”

The move is part of Google’s broader efforts to combat cybercrime, following previous legal actions against operators of large-scale ad fraud schemes and phishing networks.