GoKawiilGoogle bans Android partner Videostrong after 1.3 million set-top boxes found in botnet
Google says Shenzhen-based manufacturer Videostrong Technology built a hidden backdoor into roughly 1.3 million Android devices, mostly set-top boxes but also telehealth gear, karaoke machines and digital signage. Google says it dismantled the backdoor, disrupted related command-and-control domains, and banned Videostrong from building or selling certified Android devices or software.
GoKawiil's interpretation of the reporting above, not reported fact.
Google alleges the backdoor was sold to criminal affiliates who used it for ad fraud, data theft and residential-proxy abuse, which suggests a deliberate commercial scheme rather than a simple security lapse. The case highlights how third-party hardware makers in the Android ecosystem can undermine device trust at scale, and Google's estimate that related malware modules could still reach 10 million more devices points to a much wider unresolved risk.
- Google says Videostrong secretly built backdoors into about 1.3 million Android-based devices over several years.
- Affected devices include TV set-top boxes, telehealth equipment, karaoke machines and digital signage.
- Google has cut ties with Videostrong and disrupted related malware command-and-control domains, estimating exposure to 10 million additional devices.
Chromecast with Google TV (4K) — If this botnet story makes you wary of off-brand streaming boxes, switching to a Google-certified streaming device is a smart move. The Chromecast with Google TV runs official, regularly updated Android TV software directly from Google, reducing the risk of hidden backdoors like the one found in Videostrong's devices.
See Chromecast with Google TV (4K) on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: theverge.com — Stevie Bonifield, 2026-11-02
Published there as: “One of Google’s Android partners turned 1.3 million set-top boxes into a botnet”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.