This dangerous malware botnet now covers 1.6 million Android TVs - find out
if you're at risk

Date:
Fri, 28 Feb 2025 17:27:00 +0000

Description:
The operators seem to be "renting out" infected devices to the Vo1d botnet.

FULL STORY ======================================================================Research ers find a new variant of the Vo1d botnet It seems to be designed to be an anonymous proxy At peak, it counted almost 1.6 million devices

If you are an Android TV user, take note - there is a new and dangerous
botnet infecting endpoints left and right.

Cybersecurity researchers from Xlab have started tracking a new variant of
the Vo1d malicious botnet which, in a span of just a couple of months, grew
to roughly 1.6 million devices across 226 countries. The botnets size varies from day to day, and while it peaked in mid-January 2025, it currently counts around 800,000 devices, the researchers said.

The initial infection vector is unknown at the current time, but the majority of the victims are located in Brazil (25%), followed by South Africa (13.6%), Indonesia (10.5%), Argentina (5.3%), Thailand (3.4%) and China (3.1%). Botnet for hire

A botnet can be used for many things, including Distributed Denial of Service (DDoS) attacks, residential proxies , ad manipulation, and more. In this
case, Vo1d is being used as an anonymous proxy, redirecting criminal traffic and blending it in with legitimate, consumer traffic. It comes with advanced encryption, strong infrastructure powered by DGA, and state-of-the-art obfuscation techniques.

Since the number of infected devices varies greatly from day to day, the researchers believe the criminals are renting devices as proxy servers.

We speculate that the phenomenon of "rapid surges followed by sharp declines" may be attributed to Vo1d leasing its botnet infrastructure in specific regions to other groups, they said. So, during days when Vo1d had significantly fewer bots, they probably just gave the devices to someone else to use.

Android TV devices infected with malware will behave unusually. They will be sluggish, they will randomly display ads, or frequently crash seemingly without cause. To clean up the device, users should check their installed
apps and remove anything unfamiliar or suspicious; scan with Google Play Protect, monitor their networks activity and ultimately, if needed, perform a factory reset.

Via BleepingComputer You might also like Security flaw in popular
stalkerware apps is exposing phone data of millions We've rounded up the best password managers Take a look at our guide to the best authenticator app



======================================================================
Link to news story: https://www.techradar.com/pro/security/this-dangerous-malware-botnet-now-cover s-1-6-million-android-tvs-find-out-if-youre-at-risk


--- Mystic BBS v1.12 A47 (Linux/64)
* Origin: tqwNet Technology News (1337:1/100)