One of Google’s Android partners turned 1.3 million set-top boxes into a botnet

Google discovered that one of its Android manufacturing partners, Videostrong Technology Co., secretly built a backdoor into 1.3 million devices, turning them into a botnet. The malware enabled the manufacturer to engage in malicious activities such as ad fraud, data exfiltration, and unauthorized network traffic routing. The infected devices included Android TV set-top boxes, telehealth devices, karaoke machines, and digital signage devices. Google claims the backdoor and botnet were intentionally developed for financial gain and has since dismantled the backdoor and cut ties with Videostrong. Google also modified its review process for device manufacturers in response to the incident.