Google cuts ties with Android partner over botnet of 1.3m devices

Summarised from 2 outlets · 3 reports · Updated 2 Nov, 20:50 · Archive

Google has dismantled a backdoor in 1.3 million Android devices made by manufacturing partner Videostrong Technology Co.

Google has dismantled a backdoor in 1.3 million Android devices and banned their manufacturer, Videostrong Technology Co., from building or selling certified Android devices. Google alleges the Shenzhen-based company deliberately built the backdoor into multiple device models over several years, primarily Android TV set-top boxes but also other Android devices including telehealth equipment, karaoke machines and digital signage.

According to Google, Videostrong monetised the backdoor by selling access to criminal affiliates who loaded malware modules onto infected devices. These modules conducted ad fraud, silently enrolled devices into residential proxy networks, and loaded additional malware. Google also dismantled command and control domains operating these modules and says this action will sever access to at least 10 million additional compromised devices beyond the 1.3 million.

Google says Videostrong used obfuscation techniques to load malware onto users' devices after initial boot. The infected devices were used without owners' knowledge for 'malicious activity', including data exfiltration and routing unauthorised network traffic. Google says it has made changes to its review process for device manufacturers following the incident.

How it is being reported

• One of Google’s Android partners turned 1.3 million set-top boxes into a botnetGoogle says one of its Android manufacturing partners secretly built a backdoor in 1.3 million devices and turned them into a botnet. The company says it has now dismantled the backdoor and "cut ties" with the manufacturer, the Shenzhen, China-based Videostrong Technology Co., which has been banned from building or selling certified Android devices or […]The Verge · 2 Nov, 20:37
• One of Google’s Android partners turned 1.3 million set-top boxes into a botnetGoogle says one of its Android manufacturing partners secretly built a backdoor in 1.3 million devices and turned them into a botnet. The company says it has now dismantled the backdoor and "cut ties" with the manufacturer, the Shenzhen, China-based Videostrong Technology Co., which has been banned from building or selling certified Android devices or […]The Verge · 2 Nov, 20:37
• Cops bust botnet of 1.3M infected Android TV boxesVideostrong accused of shipping devices with a backdoor baked inThe Register · 2 Nov, 19:03

In this story: Google · Videostrong Technology Co. · Shenzhen

This summary was written by AI from the headlines and standfirsts above, and states as fact only what at least two outlets report. How we use AI · Report a problem · Corrections log