GoKawiilGoogle bans Videostrong after Android partner builds botnet into 1.3 million devices
Google disclosed that Shenzhen-based manufacturer Videostrong Technology secretly embedded a backdoor into 1.3 million Android devices, mostly set-top boxes but also telehealth gear, karaoke machines and digital signage. Google says the backdoor was used for ad fraud, data exfiltration and routing unauthorized network traffic, and that it has dismantled the backdoor, disrupted related command-and-control domains, and banned Videostrong from building or supplying certified Android software.
GoKawiil's interpretation of the reporting above, not reported fact.
The case highlights how device certification programs like Android's can still be exploited by manufacturing partners embedding hidden backdoors over years without detection. Google's assessment that disrupting affiliate C2 domains could cut off access to 10 million additional devices suggests the fraud network extended well beyond Videostrong's own hardware, pointing to a broader criminal ecosystem monetizing compromised IoT devices.
- Google says Videostrong secretly built a backdoor into 1.3 million certified Android devices over multiple years.
- Compromised devices included set-top boxes, telehealth equipment, karaoke machines and digital signage, used for ad fraud and unauthorized network traffic.
- Google banned Videostrong from Android certification and disrupted related command-and-control infrastructure, which it says could affect 10 million more devices.
Source: theverge.com — Stevie Bonifield, 2026-11-02
Published there as: “One of Google’s Android partners turned 1.3 million set-top boxes into a botnet”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.