Google shuts down malware backdoor on millions of Android TV boxes

Google has officially confirmed the shutdown of a malicious backdoor preinstalled by an Android TV device maker onto certified hardware. This serious security breach has prompted major updates to the ecosystem's testing and review processes.

• Google terminated its partnership with Videostrong over preinstalled malware backdoors.
• XCPE botnet control domains and servers were successfully blocked through legal action.
• Millions of devices across multiple brands, prominently including Mecool, were affected.
• Google updated its device review process to close testing loopholes.

Exposing Videostrong and the XCPE Botnet

Investigations revealed that Videostrong built a malicious backdoor directly into various device models over multiple years. Supported by dedicated infrastructure and constantly evolving configurations, the campaign successfully evaded detection and bypassed standard security checks. Google explicitly stated that this was not an isolated oversight by a rogue insider.

Because bad actors employed sophisticated obfuscation techniques to exploit gaps in testing, malicious code was loaded only after the device's first boot. Consequently, Google banned Videostrong and its subsidiaries from manufacturing certified Android devices or selling software to other verified vendors.

Impacted Devices and Ecosystem Response

Security researchers at Synthient compiled a list of potentially affected hardware, heavily focusing on the Mecool brand, which faces rumors of shutting down. Google acknowledged its share of responsibility for certification gaps and reiterated that a manufacturer intentionally infecting users is an unacceptable breach of trust.

Securing Affected Android TV Boxes

By taking down the command-and-control domains, Google severed access to at least 10 million compromised devices globally, making them safe to use again. However, owners of affected hardware are still advised to consider alternative options for long-term security and peace of mind.