Google has confirmed and dismantled a backdoor built into about 1.3 million Google TV and Android TV set-top boxes. The devices were manufactured by Videostrong Technology Co., and the backdoor was used to build a botnet for ad fraud and residential proxy activity. Google has cut ties with the company.
Scale and core facts
According to Tom's Hardware and Ars Technica, the backdoor was planted by certified Android TV manufacturer Videostrong and affected about 1.3 million set-top boxes. Google has dismantled the botnet secretly running on 1.3 million devices and ended its partnership with the company involved.
The two outlets agree on the core facts: 1.3 million devices, Videostrong as the manufacturer, and ad fraud and residential proxy as the uses of the backdoor. The source material does not disclose when the backdoor was discovered, the technical details, or the specific models and regional distribution of the affected devices.
| Item | Information |
|---|---|
| Affected devices | Google TV and Android TV set-top boxes |
| Number of devices | About 1.3 million |
| Manufacturer involved | Videostrong Technology Co. (certified OEM) |
| Backdoor uses | Ad fraud, residential proxy |
| Google's response | Dismantled the botnet, ended the partnership |
Supply chain trust problem
The key point is that the backdoor did not come from an external attacker. It was planted at the factory by a certified original equipment manufacturer (OEM). According to Tom's Hardware, the OEM also sold device access to criminal affiliates, giving this large device network the hallmarks of commercial abuse.
Google has cut ties with the company behind the botnet campaign.
Ars Technica reported that Google has severed relations with the company behind the botnet campaign. The source material does not include a response from Videostrong or mention whether regulators or law enforcement have become involved.
What to watch
- How the 1.3 million affected devices will be handled and how users will be notified — the source material does not say.
- Whether Google will adjust its vetting and oversight of certified OEMs.
- Whether there will be further law enforcement or regulatory action, and Videostrong's public response.
The incident is seen as a major warning about supply chain security in consumer IoT: certification does not equal trustworthiness, and a manufacturer's conduct at the factory can translate directly into large-scale cybersecurity risk.