Researchers find backdoor in thousands of generic Android set-top boxes

News Snapshot:

Caveat emptor: We all love a good deal, but sometimes, when pursuing them, we prove the adage, "You get what you pay for." Security researchers discovered thousands of cheap Android streaming boxes with firmware backdoors actively connected to command-and-control (C2) servers in China. In January, security researcher Daniel Milisic found that a cheap, unbranded streaming box, only designated T95, was infected with unremovable malware seemingly straight from the factory. Several other researchers confirmed that the Android-based system was infected with a backdoor installed sometime before reaching retailers. However, more recent research claims that the problem may be more widespread than...