Security researchers at Dr.Web have uncovered an Android malware attack targeting TV boxes, infecting approximately 1.3 million devices across 197 countries. The malware, identified as Android.Vo1d, acts as a backdoor, allowing hackers to remotely install harmful third-party applications on the affected systems.
Among the TV box models impacted by this Android malware attack are the R4 running Android 7.1.2, a model using Android 12.1, and the KJ-SMART4KVIP with Android 10.1. These devices, many of which operate on outdated software, are believed to have been vulnerable due to unpatched security flaws.
While the exact motive behind the attacks remains unclear, Dr.Web theorizes that older versions of Android on these TV boxes may present easier targets for cybercriminals. Currently, no information is available regarding the malware’s origin or its creators.
This Android malware attack has primarily been discovered in regions such as South America, North Africa, and the Middle East, with confirmed cases in countries including Brazil, Pakistan, Russia, Morocco, Saudi Arabia, Argentina, Indonesia, and Malaysia. It is not yet known how widespread the infection is in Europe or North America, as Dr.Web has not provided detailed figures for these areas.
The notion of malware compromising an Android TV box may seem unusual, but it highlights the importance of regular updates. Keeping your device’s software and firmware current is crucial, as many updates contain vital security patches designed to prevent such attacks. For users looking to further safeguard their TV boxes, installing antivirus software may offer an additional layer of protection. However, depending on the value and usage of the device, some may find this more trouble than it’s worth.
For those considering an upgrade to a more secure option, there are plenty of alternatives on the market, including streaming devices from Roku, Apple, Amazon, and Google. Notably, Amazon has committed to providing security updates for its Fire TV sticks and devices until at least 2028. Similarly, Google advises regularly updating the firmware on internet routers, which is essential for protecting Chromecast devices from potential threats.
