Jim Callaway

Millions of Android TV boxes left the factory already backdoored and sold to criminals. Google just exposed that Shenzhen manufacturer Videostrong deliberately pre-installed a persistent backdoor into more than 1.3 million Android TV boxes, including MECOOL models. Partners saw roughly 1.47 million infected devices across 206 models in 170+ countries. It sold access to criminals who used the devices as residential proxies, ran ad fraud, and stole data, all without owners knowing. The malware runs with system privileges, can silently install apps, disable Google Play Protect, and reinstalls itself from a protected partition if you delete it. Google and partners took down the command servers (cutting off access to at least 10 million more devices) and permanently banned Videostrong from certified Android. The company had slipped the malware past testing by activating it after first boot. Servers are offline, but the firmware backdoor is still on the devices already sold. Simple deletion will not fix it. When a certified maker ships malware from the factory into living rooms across 170+ countries, cheap streaming boxes can quietly turn your home internet into someone else’s tool.

The United States plans to bar Chinese telecommunications companies from direct access to American phone numbers on national security grounds, a move aimed at curbing scam-related robocalls. The Federal Communications Commission announced it will vote on Nov. 19 on a proposal to block China Mobile, China Telecom, China Unicom, and other IP-enabled service providers from obtaining direct access. Direct number access serves as a cost-effective channel for Voice over Internet Protocol providers, allowing them to route digital voice data over broadband networks while deploying advanced calling features. FCC Chairman Brendan Carr stated that the decision will reinforce the agency's frontline defenses against fraudulent operators and malicious callers. China's foreign ministry firmly condemned the impending restrictions, accusing Washington of overstretching the concept of national security and misusing state authority to suppress Chinese firms. Chinese foreign ministry spokesperson Guo Jiakun warned that Beijing will take necessary countermeasures to resolutely protect its legitimate commercial rights and interests. The FCC also intends to bar IP-enabled service providers that incorporate hardware from blacklisted suppliers deemed security risks, including Huawei and ZTE. The agency separately plans to ban all Chinese laboratories from testing U.S. electronics beginning in December 2028, while weighing the revocation of existing number authorizations for Chinese companies flagged as risks. The proposal follows prior regulatory crackdowns in which the FCC revoked the operating licenses of China Mobile, China Telecom, and China Unicom to provide international telecommunications services in the United States. Regulators are considering further sanctions, including barring Chinese carriers from connecting to domestic networks and prohibiting them from operating data centers on U.S. soil. Espionage concerns have intensified following revelations in late 2024 that the Chinese state-sponsored cyber espionage group Salt Typhoon breached U.S. telecommunications infrastructure and exfiltrated consumer call data. The FBI warned earlier this year that threats stemming from the Salt Typhoon campaign remain active and ongoing. In July, the FCC added California-based Digitalsystem Technology to its national security risk list, citing its ownership by a Chinese national and direct ties to Chinese telecommunications firms. China has consistently denied any wrongdoing or involvement in state-directed cyber operations. reuters.com/world/asia-pacif…