Ethical Hacking News
Android manufacturer hijacked 1.3 million devices, turning them into a botnet for financial gain, with Google taking steps to dismantle the backdoor and disrupt the malicious activities. The incident highlights the risks associated with Android device security and the importance of proper manufacturer vetting.
Videostrong Technology Co. secretly built a backdoor into 1.3 million Android TV set-top boxes, turning them into a botnet.The botnet was used for ad fraud, data exfiltration, and routing unauthorized network traffic, with Videostrong allegedly selling access to the backdoor to criminal affiliates.Google claims that Videostrong used obfuscation techniques to load malware onto users' devices and made changes to its review process for device manufacturers after the incident.Videostrong has been banned from building or selling certified Android devices or supplying software for them.The incident highlights the risks associated with Android device security and the importance of proper manufacturer vetting.
Google has revealed that one of its Android manufacturing partners, Videostrong Technology Co., secretly built a backdoor into 1.3 million Android TV set-top boxes, turning them into a botnet. The company claims that Videostrong intentionally deployed and operated the backdoor for financial gain, using it to monetize the devices and load malware onto them.
The botnet, which was dismantled by Google, was used for various malicious activities, including ad fraud, data exfiltration, and routing unauthorized network traffic. Videostrong allegedly sold access to the backdoor to criminal affiliates, who used it to conduct ad fraud and load malware onto infected devices. The malware also silently enrolled devices into residential proxy networks and loaded additional malware onto XCPE-compromised devices.
Google says that the malware was found in "many different device models and brands over multiple years" and that Videostrong used "obfuscation techniques" to load the malware onto users' devices after they booted up the hardware for the first time. The company also claims that it made changes to its review process for device manufacturers after this incident.
The incident highlights the risks associated with Android device security and the importance of proper manufacturer vetting. Videostrong, a Shenzhen-based company, has been banned from building or selling certified Android devices or supplying software for them.
The backdoor was discovered by Google, which has since taken steps to disrupt the command and control (C2) domains that operated the affiliate modules. However, the company estimates that taking down these domains will only sever access to at least 10 million additional compromised devices.
The revelation has sparked concerns about the security of Android devices and the potential for manufacturers to compromise user data for financial gain. Google's actions demonstrate its commitment to protecting users and ensuring the security of its ecosystem.
In response to the incident, Google has made changes to its review process for device manufacturers and has taken steps to improve the security of its Android devices. The company has also made changes to its review process for device manufacturers.
The incident serves as a reminder of the importance of device security and the need for manufacturers to prioritize user safety. Videostrong's actions have had serious consequences, and it is essential that companies like this are held accountable for their actions.
The botnet, which was dismantled by Google, has highlighted the risks associated with Android device security. The incident serves as a warning to manufacturers and users alike, emphasizing the need for proper security measures and device vetting.
In conclusion, the revelation of Videostrong's actions highlights the risks associated with Android device security and the importance of proper manufacturer vetting. Google's actions demonstrate its commitment to protecting users and ensuring the security of its ecosystem.
Related Information:
https://www.ethicalhackingnews.com/articles/Android-Manufacturer-Hijacked-Google-Devices-for-Financial-Gain-A-Botnet-Nightmare-ehn.shtml
https://www.theverge.com/1024807/google-botnet-android-tv-shut-down
Published: Mon Nov 2 16:35:21 2026 by llama3.2 3B Q4_K_M
