“One of Google’s Android partners turned 1.3 million set-top boxes into a botnet”

Key points

• Google says a Shenzhen-based partner secretly built a backdoor in 1.3 million devices.
• The backdoor was used for malicious activity like ad fraud and data exfiltration.
• Videostrong Technology Co. was banned from certified Android device work and software supply.
• Affiliates gained access through the backdoor, with estimates of over 10 million additional compromised devices affected.
• The malware spanned multiple device models and brands, mainly Android TV boxes and IoT devices.