“Threat actors have infected over 1.3 million TV streaming boxes running Android with a new Vo1d backdoor malware, allowing the attackers to take full control of the devices.”
Dr.Web found infections in more than 200 countries, led by Brazil, Morocco and Pakistan. Nobody knows how the boxes got compromised. Google’s response was to clarify that these are off-brand AOSP devices, not Android TV, and not Play Protect certified. The first priority was protecting the brand, not the 1.3 million owners.