Google dismantles botnet created by Android partner using hidden backdoor
Google has severed ties with hardware partner Videostrong Technology Co. after discovering that the Shenzhen-based manufacturer intentionally built a backdoor into roughly 1.3 million devices. Google dismantled the unauthorized infrastructure and permanently barred the company from building, selling, or supplying software for certified Android hardware. The backdoor was embedded across various brands and models over multiple years, impacting mostly Android TV set-top boxes alongside other connected hardware like telehealth devices, karaoke machines, and digital signage displays.
Videostrong used obfuscation methods to install the malware silently during a device's initial setup, monetizing access by renting it to criminal affiliates. These third parties loaded secondary modules to run ad-fraud schemes, steal data, and enlist consumer hardware into residential proxy networks for illicit traffic routing. In addition to neutralizing the primary backdoor, Google disrupted the command-and-control (C2) domains driving the affiliate modules, an intervention estimated to cut off access to at least 10 million additional compromised devices. Following the incident, Google updated its review process for Android hardware partners.
Continue in the app — vote & join in ➔