Google Cuts Ties With Videostrong Over Android TV Backdoor
Google says Videostrong built malware into certified Android TV devices and has taken legal action to block the XCPE botnet's servers.
Google has severed ties with Videostrong, a maker of certified Android TV devices, after finding that the company built a backdoor into its hardware to sell access and distribute malware. The action was reported by 9to5google.com.
According to Google, Videostrong and its subsidiaries are now banned from selling certified Android devices and from selling software to other certified vendors. Google has also taken legal action to block the domains and servers Videostrong used to control the XCPE botnet and its malware modules.
Google says the malicious software was built into many device models and brands over multiple years. Shutting down the command-and-control domains will cut access to at least 10 million additional compromised devices, the company said.
Device list and review changes
Synthient compiled a list of potentially affected devices, which was reported on by The Hacker News and includes the Android TV and Google TV box brand Mecool. Mecool has made well-known Android TV and Google TV boxes in the past and has been rumored to be shutting down.
Google said it is updating its review process to protect users against this type of behavior.
Quick answers
Which devices are affected by the Videostrong malware?
Synthient compiled a list of potentially affected devices, reported on by The Hacker News, which includes the Mecool brand of Android TV and Google TV boxes.
What did Google do about the XCPE botnet?
Google took legal action to block the domains and servers Videostrong used to control the XCPE botnet, which the company says severs access to at least 10 million additional compromised devices.
Can Videostrong still sell certified Android devices?
No. Google has banned Videostrong and its subsidiaries from selling certified Android devices or selling software to other certified vendors.