Google Cuts Ties With Videostrong Over 1,3 juta Infected Android Devices
Google has severed ties with Shenzhen-based manufacturer Videostrong Technology Co. after discovering that the company secretly embedded backdoor malware into 1,3 juta Android devices, Telset.id reported. The compromised hardware, which includes Android TV set-top boxes, telehealth units, karaoke machines, and digital signage, was converted into a botnet used for unauthorized data exfiltration, ad fraud, and network traffic redirection.
The malicious code was not introduced through third-party app downloads or external network attacks. Instead, it was planted directly at the manufacturing level by a trusted partner. According to Google’s findings, the backdoor and botnet infrastructure were engineered specifically for financial gain. Videostrong commercialized the access by selling entry to criminal affiliates, who loaded secondary malware modules onto the affected hardware.
Command And Control Infrastructure Disruption
Google acted to dismantle the command and control (C2) domains operated by Videostrong’s criminal affiliates. Because those affiliates distributed malware modules through channels outside the core software update mechanism, Google assessed that disabling the C2 domains successfully cut off access to at least 10 juta additional compromised devices worldwide, Pomodo.id reported.
Google just disrupted the XCPE Android TV box botnet and banned maker Videostrong. Here's what you need to know.The XCPE botnet hid in more than 1.3 million Android TV set-top boxes across 200 countries. Google says it has high confidence that Shenzhen device maker Videostrong… https://t.co/zsh8FOUery pic.twitter.com/RF0sBHUd40
The secondary modules deployed across the infected network performed continuous ad fraud, secretly enrolled devices into residential proxy networks, and downloaded further malicious payloads. Videostrong used sophisticated obfuscation techniques to load the malware only after users first powered on their devices, allowing the software to bypass initial boot-phase security inspections.
Supply Chain Security Reforms And Manufacturer Restrictions
In response to the breach, Google banned Videostrong Technology Co. from building, selling, or supplying software for certified Android devices. The company also overhauled its manufacturer review procedures to tighten oversight across its supply chain for certified hardware.
The incident highlights the vulnerabilities inherent in hardware procurement where consumers trust factory-installed firmware. Devices utilizing Android operating systems outside the traditional smartphone market—such as set-top boxes and digital signage—faced the highest exposure levels due to their reliance on pre-installed manufacturer builds.
Digital Security Awareness And Device Protection
For users in Indonesia, this situation highlights the critical importance of everyday technology security, as a botnet of 1,3 juta devices demonstrates how security can be compromised due to gaps in systems that should be secure. Long-term digital security awareness helps reduce risks and protect user privacy.
Frequently Asked Questions
What types of devices were infected by the Videostrong backdoor?
The malware affected numerous models and brands across multiple product categories, primarily Android TV set-top boxes, along with digital signage, karaoke machines, and telehealth equipment manufactured by Videostrong Technology Co.
How did Videostrong monetize the compromised devices?
Videostrong sold backdoor access to criminal affiliates who installed secondary modules to execute ad fraud, route traffic through residential proxies, and download additional malware onto the 1,3 juta active systems.
What action did Google take against the manufacturer?
Google permanently severed business relations with Videostrong Technology Co., prohibited the company from producing or supplying software for certified Android devices, and updated its manufacturer review protocols.
Worth a look