Home · Technology · Nov 2 archive

Google Banned Android Partner After 1.3M Set-Top Boxes Turned Into Botnet

Confirmed

Technology Desk

In Short: Google and its partners have shut down the botnet, which was not an isolated incident but a purposeful deployment by an approved Android device manufacturer.

Google logo
Photo: Google INC / Wikimedia Commons (Public domain)

Google has banned Videostrong Technology Co., a Shenzhen-based manufacturer, from building or selling any certified Android devices following a significant supply chain security breach.

According to Google Cloud's threat intelligence team, Videostrong deliberately embedded backdoors into 1.3 million certified devices and operated them as a botnet without users' knowledge or consent.

The botnet, which spanned more than 170 countries, was used for malicious activities such as ad fraud, data exfiltration, and unauthorized network traffic.

The compromised devices undermined consumer trust in the Android ecosystem, as users had no reason to suspect their brand-new devices were compromised from day one.

Google's decision to ban Videostrong marks one of the most significant supply chain security breaches in the Android ecosystem's history.

The incident highlights the importance of trust in consumer electronics and the need for robust security measures in the Android ecosystem.

While Google continues to expand its Android ecosystem with new devices and partnerships, this breach underscores the ongoing challenges in maintaining security and privacy.

Developers integrate with a cloud-hosted MCP server or Android MCP using the AppFunctions APIs, then use the Google Connected Console to register, test, and submit their app.

Google is relying on partners like Samsung and Xreal to bring devices powered by its Android XR platform to consumers, signaling a push to bring Android XR beyond headsets and into lightweight, optical see-through smart glasses.

What this adds

The breach has raised concerns about the security of certified Android devices and the potential for similar incidents in the future.

Google's response to the breach includes a multi-year extension of its partnership with XREAL, elevating the device into a cornerstone of Android XR’s future.

The incident has not yet led to any legal action or fines against Videostrong, but it has significantly impacted the company's ability to operate within the Android ecosystem.

What's confirmed

What's still developing

Sources