Google dismantles botnet secretly running on 1.3 million Android TV boxes

Summary

Google has dismantled a botnet that was secretly running on about 1.3 million Android TV and Google TV set-top boxes. Google found an unauthorized backdoor built into the boxes made by Videostrong Technology Co., a certified Android TV manufacturer, and shut it down. Reports say the manufacturer sold access to criminal affiliates, who used the network for ad fraud and residential proxy services. Google has cut ties with the company behind the botnet campaign.

Timeline

1. Ars Technica

   3 Nov 2026, 17:08 UTCSource ↗

   Ars Technica reports that Google has dismantled a botnet secretly running on 1.3 million Android TV boxes and has cut ties with the company behind the botnet campaign.

2. Tom's Hardware

   4 Nov 2026, 11:00 UTCSource ↗

   Tom's Hardware reports that Google discovered and shut down a backdoor built into millions of Google TV and Android TV set-top boxes made by Videostrong Technology Co., and that the manufacturer sold access to criminal affiliates who used the network for ad fraud and residential proxy.