What happened?
Google said one of its Android manufacturing partners, Shenzhen-based Videostrong Technology, secretly built a backdoor into 1.3 million devices. According to the company, these devices were turned into a botnet without their owners' knowledge.
What were the devices used for?
Google says the infected devices were used for "malicious activity," including ad fraud, data exfiltration, and routing unauthorized network traffic. The company claims the backdoor and botnet were intentionally developed and operated for financial gain.
What did Google do?
Google said it dismantled the backdoor and cut ties with Videostrong. The manufacturer is now banned from building or selling certified Android devices or supplying software for them.
What it means for readers
The incident highlights the security risk in the supply chain for smart TV boxes and similar low-cost Android devices. Users should be cautious about devices from uncertified or questionable manufacturers.
