Skip to main content
cve.nowby Sazabi
← Early warnings
SZB-7a8b5fe3b6Early warningMalicious packageReported, not confirmed

Google says Videostrong backdoored Android TV boxes in 1.3M-device botnet

Google led a takedown that disrupted a botnet of more than 1.3 million Android devices, mostly TV set-top boxes, in late October. Google says it is highly confident that device maker Videostrong intentionally put a backdoor in the boxes and sold access to criminals.

Written by a model from the sources below. Verify against them.

Sources3Reported, not confirmed
Kind
Malicious package
Vendor
Videostrong
Product
Android TV set-top boxes
Status
Reported, not confirmed
First seen

What to do

  • Check whether any Videostrong set-top boxes are on your network.

  • Disconnect suspected devices from the network and stop using them until they are verified.

  • Replace affected boxes with devices from a vendor that provides trusted firmware updates.

  • Monitor home routers and networks for unexpected traffic from streaming devices.

Timeline

  1. Made public by The Hacker News
  2. First seen by cve.now

Evidence 3

  1. Press
    The Hacker News
    “Google says it is highly confident that device maker Videostrong intentionally put a backdoor in the boxes and sold access to criminals.”
  2. Social
    Mastodon
    “Google says XCPE shipped in 1.3M+ Android TV boxes and attributes deliberate deployment to OEM Videostrong.”
  3. Social
    Mastodon
    “Google just disrupted a botnet of more than 1.3 million Android devices, mostly TV boxes, and says the manufacturer itself, Videostrong, intentionally built the backdoor in and sold access to criminals.”

Corrections

None so far.

Something wrong on this page? Report an error. Every fix is listed here.

FAQ

Questions about SZB-7a8b5fe3b6

Has Videostrong confirmed it?

The Hacker News, Mastodon and Mastodon report it. No statement from Videostrong has reached cve.now yet.Source: The Hacker News, Mastodon, Mastodon

What should Videostrong users do?

Check whether any Videostrong set-top boxes are on your network. Disconnect suspected devices from the network and stop using them until they are verified. Replace affected boxes with devices from a vendor that provides trusted firmware updates. Monitor home routers and networks for unexpected traffic from streaming devices.

Sources