Technology1 min read

Google Chinese company, partner for Android devices, secretly turned 1.3 million devices into 'spy gadgets'

By · Via Times of India · Published by Everything Blog

In short

Videostrong developed and operated a covert backdoor network to monetize compromised electronics by selling unauthorized access to cybercriminal organizations. These illicit buyers deployed secondary malware modules that enlisted hardware into residential proxy networks, executed ad fraud, and distributed additional malicious software. The rogue code was engineered to activate automatically the first time users powered on their equipment, effectively hiding the intrusion. Although set-top streaming boxes made up the bulk of the targets, the infiltration also compromised specialized equipment such as karaoke systems, digital signs, and telehealth monitors.

Key points

  • Hardware manufacturers intentionally deploying firmware backdoors present massive securit…: Hardware manufacturers intentionally deploying firmware backdoors present massive security risks across consumer IoT ecosystems.
  • Cybercriminals leveraged the hijacked device network to conduct ad fraud and route unauth…: Cybercriminals leveraged the hijacked device network to conduct ad fraud and route unauthorized residential web traffic.
  • Infrastructure disruption alongside tighter partner security reviews is vital to neutrali…: Infrastructure disruption alongside tighter partner security reviews is vital to neutralizing persistent supply-chain hardware threats.

Sources checked by our analysis pipeline: 1

Google revealed that it has severed ties with one of its Android manufacturing partners after discovering that the company allegedly built a secret backdoor into more than 1.3 million devices, allowing them to be turned into a massive botnet and used for malicious activities without the knowledge of their owner. According to a report by The Verge, Google identified the manufacturer as Videostrong Co, which is a Shenzhen-based company that produced Android-powered devices. Google said that it has now banned the company from building or selling certified Android devices and from supplying software for them.

Devices secretly enrolled into a botnet said Google

Google alleges that Videostrong intentionally developed, deployed and operated a backdoor which enabled the infected devices to be remotely controlled for financial gain. The compromised devices were reportedly used for activities such as ad fraud, data theft and routing unauthorised internet traffic.

As per Google’s findings, the company monetised the backdoor by selling access to criminal groups, which then installed additional malware modules on affected devices. Those modules were then used to enrol devices into residential proxy…

Technology