Google Chinese company, partner for Android devices, secretly turned 1.3 million devices into 'spy gadgets'

Google revealed that it has severed ties with one of its Android manufacturing partners after discovering that the company allegedly built a secret backdoor into more than 1.3 million devices, allowing them to be turned into a massive botnet and used for malicious activities without the knowledge of their owner. According to a report by The Verge, Google identified the manufacturer as Videostrong Co, which is a Shenzhen-based company that produced Android-powered devices. Google said that it has now banned the company from building or selling certified Android devices and from supplying software for them.Devices secretly enrolled into a botnet said GoogleGoogle alleges that Videostrong intentionally developed, deployed and operated a backdoor which enabled the infected devices to be remotely controlled for financial gain. The compromised devices were reportedly used for activities such as ad fraud, data theft and routing unauthorised internet traffic.As per Google’s findings, the company monetised the backdoor by selling access to criminal groups, which then installed additional malware modules on affected devices. Those modules were then used to enrol devices into residential proxy networks, conduct advertising fraud and distribute further malware. Google said that it has disrupted the command-and-control infrastructure which is used to operate the botnet and severed access to millions of compromised devices connected via the scheme.Which devices were affectedThe malware was found built directly into many device models and brands over several years. Most of the affected products were Android TV set-top boxes, but the botnet also infected other Android-based internet-of-things devices, including telehealth devices, karaoke machines and digital signage.Google says malware was intentionally hiddenAccording to Google, Videostrong used obfuscation techniques to conceal the malicious code and prevent easy detection. The malware was reportedly loaded onto devices after users powered them on for the first time, making it difficult for device owners to know their hardware had been compromised.Google said the backdoor and botnet were "intentionally developed, deployed, and operated for financial gain," indicating that the activity was not the result of a software vulnerability accidentally exploited by attackersSecurity review process tightenedIn response to the incident, Google said it has dismantled the backdoor and implemented changes to its device-manufacturer review process. The company has also terminated its relationship with Videostrong and barred the manufacturer from participating in the certified Android ecosystem.The case highlights growing concerns around supply-chain security in connected devices, particularly as Android-powered hardware expands beyond smartphones into televisions, healthcare products and other internet-connected consumer and business equipment.You use AI every day. Now get your AI Quotient. Take the AIQ test.