this post was submitted on 15 Sep 2024
40 points (97.6% liked)

Security

630 readers
4 users here now

A community for discussion about cybersecurity, hacking, cybersecurity news, exploits, bounties etc.

Rules :

  1. All instance-wide rules apply.
  2. Keep it totally legal.
  3. Remember the human, be civil.
  4. Be helpful, don't be rude.

Icon base by Delapouite under CC BY 3.0 with modifications to add a gradient

founded 1 year ago
MODERATORS
LinearArray@programming.dev
40
1.3 million Android-based TV boxes backdoored; researchers still don’t know how (arstechnica.com)
submitted 3 days ago by kryllic@programming.dev to c/security@programming.dev
12 comments fedilink hide all child comments
 

Researchers still don’t know the cause of a recently discovered malware infection affecting almost 1.3 million streaming devices running an open source version of Android in almost 200 countries.

all 16 comments
sorted by: hot top controversial new old
[–] szczuroarturo@programming.dev 1 points 2 days ago

Given that they are not certified by google its probably cheap chinese ones. Im pretty sure they are known to often contain malware out of the box

[–] CaptObvious@literature.cafe 7 points 3 days ago (2 children)

Well that’s encouraging. Thank all the gods I only own dumb TVs

[–] pandapoo@sh.itjust.works 11 points 3 days ago (3 children)

This is about the boxes you plug into the TV, like a Roku, or Fire TV, except it's the cheap Chinese white box rebranded Android TV boxes you buy on places likeAmazon, Ali, and eBay.

[–] CaptObvious@literature.cafe 4 points 3 days ago

Ah, so it is. My bad

[–] BB_C@programming.dev 2 points 3 days ago

They don't even run Android TV. They run a modified (normal) Android. This is well known, but the article also mentions it.

[–] burgersc12@mander.xyz 2 points 3 days ago (1 children)

So basically a non-issue unless you just plug the cheapest streaming box you can get your hand on into your devices.

[–] pandapoo@sh.itjust.works 4 points 3 days ago* (last edited 3 days ago) (1 children)

I didn't say they're the cheapest, just that the boxes I'm personally aware of with this problem are white box rebranded ATVs.

But I haven't looked through the entire list, so it's entirely possible that some other more well-known and "respectable" device brands are also compromised. If you have an Android TV box, you should probably search the list to find out.

[–] BakedCatboy@lemmy.ml 3 points 3 days ago (1 children)

Isn't the article about tv boxes that you use with your dumb TV so you can watch streaming stuff on it? I don't think any TVs are affected

[–] CaptObvious@literature.cafe 4 points 3 days ago

Seems like that’s true. My bad