Google dismantles botnet of 1.3 million Android TV devices from partner

Google announced it has dismantled a backdoor created by one of its Android manufacturing partners that turned 1.3 million Android TV set-top boxes into a botnet, according to The Verge.

The manufacturer, Shenzhen-based Videostrong Technology Co., intentionally hijacked devices with malware to conduct activities such as ad fraud, data exfiltration, and unauthorized network traffic routing, The Verge reported.

Google has banned Videostrong from producing or selling certified Android devices or supplying software for them, effectively cutting ties with the company.

The backdoor was monetized by Videostrong through selling access to criminal affiliates who loaded additional malware modules onto the infected devices, including ad-fraud modules and residential proxy network enrollments, The Verge explained.

Google also disrupted the command and control domains operating these affiliate modules, which are believed to affect at least 10 million other compromised devices beyond those made by Videostrong.

This action aims to sever the affiliates' control over a large network of infected devices, mitigating further malicious activity.

Google's intervention highlights ongoing challenges in device security within the Android ecosystem and efforts to combat malware at the manufacturing level.