Google has announced strict legal and technical measures against the manufacturer Videostrong, following the discovery of its involvement in embedding a malicious backdoor within certified Android TV and Google TV devices. This action has led to the permanent termination of relations with the company and a ban on it manufacturing any devices carrying Google applications in the future.
Details of the breach and the malicious network
Investigations revealed that the malware was deeply embedded in many device models for years, as the manufacturer used sophisticated infrastructure and constantly changing configurations to avoid detection. This software managed the XCPE botnet, which allowed the attacker to sell access to infected devices and distribute additional malicious software.
Google successfully disrupted the domains and servers that Videostrong was using to control this network, effectively cutting off access to at least 10 million affected devices, making them safe to use for now, although experts recommend that users look for more secure alternatives.
Why does this news matter?
This incident represents a major vulnerability in Google's certification system, as these devices were sold to consumers as "certified," implying safety and reliability. Google acknowledged that actors exploited gaps in its testing processes by loading the malicious code after the device's first boot, prompting the company to update its review protocols to prevent such breaches of trust from recurring.
What changes practically?
- Manufacturer ban: Videostrong and its subsidiaries have been prohibited from selling any certified devices or software to other vendors.
- Security updates: Google is working to strengthen device inspection processes to ensure there is no pre-installed malware.
- Brand impact: Reports indicate that devices from the Mecool brand were among those affected, amid news of the potential cessation of the company's operations.
Google asserts that the manufacturer's deliberate infection of its users with malware is an unacceptable violation of trust, and this step is part of broader efforts to improve the security of the smart TV ecosystem.