“One of Google’s Android partners turned 1.3 million set-top boxes into a botnet”

Key points

• A Shenzhen-based partner, Videostrong Technology Co., secretly built a backdoor in 1.3 million devices.
• Infected devices were used for ad fraud, data exfiltration, and unauthorized network routing.
• Google claims backdoor and botnet were developed and operated for financial gain.
• Videostrong monetized access by selling to affiliates and loading malware modules onto devices.
• Google disrupted C2 domains and updated its device-manufacturer review process.