this post was submitted on 15 Sep 2024
40 points (97.6% liked)

Security

684 readers
1 users here now

A community for discussion about cybersecurity, hacking, cybersecurity news, exploits, bounties etc.

Rules :

  1. All instance-wide rules apply.
  2. Keep it totally legal.
  3. Remember the human, be civil.
  4. Be helpful, don't be rude.

Icon base by Delapouite under CC BY 3.0 with modifications to add a gradient

founded 2 years ago
MODERATORS
LinearArray
40
1.3 million Android-based TV boxes backdoored; researchers still don’t know how (arstechnica.com)
submitted 3 months ago by kryllic to c/security
12 comments fedilink hide all child comments
 

Researchers still don’t know the cause of a recently discovered malware infection affecting almost 1.3 million streaming devices running an open source version of Android in almost 200 countries.

all 16 comments
sorted by: hot top controversial new old
[–] [email protected] 7 points 3 months ago (2 children)

Well that’s encouraging. Thank all the gods I only own dumb TVs

[–] [email protected] 11 points 3 months ago (3 children)

This is about the boxes you plug into the TV, like a Roku, or Fire TV, except it's the cheap Chinese white box rebranded Android TV boxes you buy on places likeAmazon, Ali, and eBay.

[–] [email protected] 4 points 3 months ago

Ah, so it is. My bad

[–] [email protected] 2 points 3 months ago (1 children)

So basically a non-issue unless you just plug the cheapest streaming box you can get your hand on into your devices.

[–] [email protected] 4 points 3 months ago* (last edited 3 months ago) (1 children)

I didn't say they're the cheapest, just that the boxes I'm personally aware of with this problem are white box rebranded ATVs.

But I haven't looked through the entire list, so it's entirely possible that some other more well-known and "respectable" device brands are also compromised. If you have an Android TV box, you should probably search the list to find out.

[–] BB_C 2 points 3 months ago

They don't even run Android TV. They run a modified (normal) Android. This is well known, but the article also mentions it.

[–] [email protected] 3 points 3 months ago (1 children)

Isn't the article about tv boxes that you use with your dumb TV so you can watch streaming stuff on it? I don't think any TVs are affected

[–] [email protected] 4 points 3 months ago

Seems like that’s true. My bad

[–] szczuroarturo 1 points 3 months ago

Given that they are not certified by google its probably cheap chinese ones. Im pretty sure they are known to often contain malware out of the box