Google breaks up 1.3 million‑device Android botnet, blocks TV box maker over hidden backdoor
Google has disrupted an Android botnet controlling about 1.3 million devices and banned TV box maker Videostrong, saying the company built a backdoor into its products and let criminals use it.
An Android botnet built on everyday streaming hardware has been taken offline, but the devices behind it remain compromised.
Google reports that it has disrupted a botnet made up of about 1.3 million Android devices and has banned TV box manufacturer Videostrong. According to Google, the company deliberately built a backdoor into its devices and sold access to criminals.
The control servers that coordinated the infected devices have been shut down. That cuts off the main channel the operators used to issue commands. The underlying backdoor, however, is still present on the hardware.
Owners of the affected TV boxes are unlikely to notice obvious changes. Their devices may look and function as normal media players, even though the software on them was designed to give remote operators hidden control.
For internet providers and network defenders, a botnet of this size creates a significant pool of machines that can be used for activities such as large-scale fraud or disruptive traffic floods. Breaking up the command structure reduces the immediate threat, but it doesn’t remove the insecure code from living rooms, offices and small businesses.
Google’s move against Videostrong highlights the risk that supply chains pose when devices are compromised before they reach users. What happens next—whether through firmware fixes, product recalls or regulatory scrutiny—will determine if similar backdoors become too costly for manufacturers to risk.
Sources
- OSINT