Newsletters
Google has dismantled a backdoor that infected 1.3 million internet-connected devices made by a Chinese company with malware and turned them into residential proxies, Japanese police said, The Japan Times reported Thursday.
A backdoor is a hidden way to bypass a device’s normal security, and residential proxies are household devices used to relay other people’s internet traffic.
Google said that it had worked with Japan’s National Police Agency and other partners to dismantle the backdoor and the network of infected devices, known as a botnet, last week. The network was established by Shenzhen-based manufacturer Videostrong.
The affected devices include Android TV set-top boxes, karaoke machines, and other internet-connected Android devices used for telehealth services, which are remote medical services, and digital signage, which are electronic display screens.
“We found this malicious software built directly into many different device models and brands over multiple years, supported by dedicated infrastructure and constantly evolving configurations to evade detection and manage their affiliates,” Google said, adding that the backdoor appears to have been “intentionally developed, deployed, and operated for financial gain.”
Google said Videostrong allegedly sold criminals access to the devices and helped install malware, allowing operators to capture screenshots, record keystrokes, and steal sensitive account and device data.
The case came to light in September 2025 when Fukuoka police investigated an unauthorized online bank transfer and discovered infected devices.
A cybercrime unit later traced their manufacturing and sales to Videostrong and alerted Google.
In July, the National Police Agency warned that smart TVs, routers, and other connected devices could be hijacked as residential proxies, urging consumers to avoid unverified apps, free VPNs and streaming services, as well as offers to share internet bandwidth for payment.
The agency linked residential proxies to 1,918 unauthorized bank transfers in 2024, resulting in losses of about 2.89 billion yen ($18.3 million).
Japan’s National Institute of Information and Communications Technology estimates that tens of thousands of residential proxy devices are operating in the country.
Residential proxies route internet traffic through household connections, allowing cybercriminals to hide their identities while carrying out malicious activities or stealing personal data.
Set as preferred source
Set as preferred source
2 min read
1 min read
