Google bans manufacturer after botnet found on 1.3 million Android devices

Google has moved to terminate its partnership with Chinese manufacturer Videostrong Technology after discovering a clandestine backdoor embedded in over 1.3 million Android-certified set-top boxes. The devices were reportedly converted into a botnet without the knowledge of the end users, facilitating illicit activities including ad fraud, unauthorized data exfiltration, and network traffic routing.

According to Google, the security vulnerability was not an oversight but a deliberate design intended for financial gain. The company stated that it has successfully dismantled the botnet infrastructure and implemented measures to prevent affected units from accessing the Android ecosystem. Videostrong is now prohibited from manufacturing or distributing certified Android products.

This incident highlights ongoing supply chain security challenges for major tech firms that license their software to third-party hardware manufacturers. As of now, Google has banned the Shenzhen-based company from future software development and device production roles.