Cybercriminals have devised a potent new tool dubbed Geobox, which repurposes the Raspberry Pi mini-computer into a versatile hacking device. Sold for a lifetime fee of $700 or a monthly rate of $80, Geobox enables fraudsters and criminals to spoof locations, mimic Wi-Fi access points, manipulate DNS and network parameters, and maintain anonymity.
Discovered by researchers from Resecurity during an investigation into online banking theft, Geobox has surfaced on the Dark Web and Telegram. Utilizing multiple Geobox devices strategically placed in remote locations, cybercriminals enhance their anonymity and complicate tracking efforts. Notably, these devices do not store any logs by default, further complicating investigations.
Despite Raspberry Pi’s widespread use for various projects, Geobox transforms it into a powerful tool for digital deception, specifically targeting the Raspberry Pi 4 Model B with at least 4GB of RAM. Its streamlined setup process and diverse functionality, including VPN connections, GPS and Wi-Fi emulation, DNS configuration, and data substitution tools, make it accessible to a broad audience of malicious actors.