Google Cuts Ties With Chinese Partner Over Android Spyware Scandal

Google has taken action against one of its Android manufacturing partners after discovering a security threat affecting more than 1.3 million devices. The company has found that Shenzhen-based Videostrong Co secretly installed a backdoor in devices allowing them to be remotely controlled and used for malicious activities, without the owners’ knowledge.

According to a report by a famous publication, Google has identified Videostrong as the manufacturer behind the operation. Following the discovery, Google terminated its relationship with the company and banned it from manufacturing or selling certified Android devices, as well as supplying software for such products.

Millions of Android devices allegedly turned into a botnet

Google alleges that Videostrong intentionally developed and operated the backdoor to gain financial benefits. The compromised devices were reportedly used for several illegal activities, including advertising fraud, data theft and routing unauthorised internet traffic.

According to Google's investigation, Videostrong allegedly made money by selling access to the backdoor to criminal groups. These groups reportedly installed additional malware modules on affected devices, turning them into part of residential proxy networks. The compromised hardware could then be used to manipulate online advertisements, distribute malware and carry out other cybercriminal activities.

Google has since disrupted the command-and-control infrastructure responsible for managing the botnet, cutting off communication between the operators and millions of affected devices.

Which devices were affected?

The malicious software was reportedly embedded in multiple device models and brands over several years. Android TV set-top boxes accounted for most of the affected products.

However, the problem was not limited to television-related devices. Other Android-powered Internet of Things (IoT) products, including telehealth equipment, karaoke machines and digital signage systems, were also reportedly affected.

Malware was deliberately concealed

Google said Videostrong used obfuscation techniques to hide the code making it difficult for security systems to identify the threat. The malware was reportedly activated after users switched on their devices for the time.

This meant that consumers could unknowingly use compromised hardware without realising that their devices were participating in a criminal network.

Google described the backdoor as "intentionally developed, deployed, and operated for financial gain," making it clear that the incident was not simply an accidental exploitation of a software vulnerability.

Google strengthens its security checks

Following the discovery, Google said it had dismantled the backdoor and strengthened its review process for Android device manufacturers. The company has also removed Videostrong from its certified Android ecosystem.

The incident raises concerns about supply‑chain security as connected devices become increasingly common. It also highlights how compromised hardware can pose risks, beyond smartphones extending to televisions, healthcare equipment and other internet‑connected products.

ABOUT THE AUTHOR

Kahekashan

[email protected]

Kahekashan is a passionate technophile with a keen eye for cutting-edge gadgets, emerging technologies, and everything in the digital realm. Raised in a Defence family with strong values and a background in literature, she has consistently pursued excellence in every endeavour. Her last full-time assignment involved content writing with the Indian School of Business.

Read More