1.3 million Android-based TV boxes backdoored; researchers still don’t know how

2 years ago by kryllic to c/security

Infection corrals devices running AOSP-based firmware into a botnet.

Researchers still don’t know the cause of a recently discovered malware infection affecting almost 1.3 million streaming devices running an open source version of Android in almost 200 countries.

CaptObvious 8 points 2 years ago

Well that’s encouraging. Thank all the gods I only own dumb TVs

path: 0 12378099, hotness: undefined, score: 8, children: 14
pandapoo 11 points 2 years ago

This is about the boxes you plug into the TV, like a Roku, or Fire TV, except it's the cheap Chinese white box rebranded Android TV boxes you buy on places likeAmazon, Ali, and eBay.

path: 0 12378099 12378164, hotness: undefined, score: 11, children: 11
CaptObvious 4 points 2 years ago

Ah, so it is. My bad

path: 0 12378099 12378164 12378953, hotness: undefined, score: 4, children: 0
burgersc12 2 points 2 years ago

So basically a non-issue unless you just plug the cheapest streaming box you can get your hand on into your devices.

path: 0 12378099 12378164 12378446, hotness: undefined, score: 2, children: 8
pandapoo 4 points 2 years ago

I didn't say they're the cheapest, just that the boxes I'm personally aware of with this problem are white box rebranded ATVs.

But I haven't looked through the entire list, so it's entirely possible that some other more well-known and "respectable" device brands are also compromised. If you have an Android TV box, you should probably search the list to find out.

path: 0 12378099 12378164 12378446 12378692, hotness: undefined, score: 4, children: 7
burgersc12 -2 points 2 years ago
path: 0 12378099 12378164 12378446 12378692 12379108, hotness: undefined, score: -2, children: 6
BB_C 2 points 2 years ago

They don't even run Android TV. They run a modified (normal) Android. This is well known, but the article also mentions it.

path: 0 12378099 12378164 12386803, hotness: undefined, score: 2, children: 0
BakedCatboy 3 points 2 years ago

Isn't the article about tv boxes that you use with your dumb TV so you can watch streaming stuff on it? I don't think any TVs are affected

path: 0 12378099 12378662, hotness: undefined, score: 3, children: 1
CaptObvious 4 points 2 years ago

Seems like that’s true. My bad

path: 0 12378099 12378662 12378973, hotness: undefined, score: 4, children: 0
szczuroarturo 2 points 2 years ago

Given that they are not certified by google its probably cheap chinese ones. Im pretty sure they are known to often contain malware out of the box

path: 0 12404869, hotness: undefined, score: 2, children: 0
security
security

@programming.dev

login for more options
2202
173
93

A community for discussion about cybersecurity, hacking, cybersecurity news, exploits, bounties etc.

Rules :

  1. All instance-wide rules apply.
  2. Keep it totally legal.
  3. Remember the human, be civil.
  4. Be helpful, don't be rude.

Icon base by Delapouite under CC BY 3.0 with modifications to add a gradient

go to feed...