Long Live The Vo1d Botnet: New Variant Hits 1.6 Million TV Globally

216.73.217.22

Long Live The Vo1d Botnet: New Variant Hits 1.6 Million TV Globally

· Published 28/02/2025 10:35 · Modified 28/02/2025 11:10

Essential information

Published: 28/02/2025 10:35
Modified: 28/02/2025 11:10
Tags: 2025-02-28 android tv botnet proxy network set-top box vo1d
Related entities: 48 observables, 1 intrusion sets (apt), 20 techniques (mitre), 3 malware, 20 others

Description

The Vo1d botnet has infected 1.6 million Android TV devices across 200+ countries, posing a significant cybersecurity threat. This new variant demonstrates enhanced stealth and resilience, utilizing RSA encryption, DGA-based infrastructure, and a modified XXTEA algorithm. The botnet's scale and capabilities surpass previous major attacks, potentially enabling devastating DDoS attacks or unauthorized content broadcasting. Analysis reveals a sophisticated multi-component system including downloaders, backdoors, and modular malware for proxy services and ad fraud. The botnet's rapid growth and evasion techniques highlight the urgent need for improved security measures in smart TV devices and set-top boxes.