Cheap Android TV boxes came with malware, and Google says the manufacturer was behind it

https://www.techspot.com/images2/news/ts3_thumbs/2026/11/2026-11-04-ts3_thumbs-798.jpg

Serving tech enthusiasts for over 25 years.
TechSpot means tech analysis and advice you can trust.

What we know so far: Google has severed ties with Android TV box manufacturer Videostrong Technology over allegations that it pre-loaded a backdoor on more than 1.3 million set-top boxes. Dubbed XCPE, the backdoor reportedly used "obfuscation techniques" to evade Google's screening process and enrolled infected devices in a massive botnet that has since been shut down by the search giant.

The backdoor was discovered in the firmware of multiple Videostrong devices, such as the Mecool KTI, as well as several white-label Android TV boxes. Seattle-based cybersecurity and fraud intelligence research group Synthient, which worked with Google to analyze the malware, claims it identified at least 182 different device models that were infected with the backdoor and enrolled in the botnet.

The malware reportedly exploited a firmware vulnerability in Android boxes to...

Copyright of this story solely belongs to www.techspot.com. To see the full text click HERE

Read more

https://cdn.mos.cms.futurecdn.net/ZL4Tru3YjXVK2E8QzeGPqW-2560-80.jpg

I love Leak's heritage looks and make no mistake, in some ways this modern network music player is a lion hiding in sheep's clothing, it just needs a touch more dynamic potency

In some ways, the Leak TruStream sounds quite like it looks — quite refined, grown-up, nicely detailed and generally rather pleasant. It’s short of dynamic potency, though, and this, in combination with some occasionally hard-edged treble reproduction, means it’s not the complete article Reasons to buy * +Expansive, organised and