Image by George Dagerotip, from Unsplash
Cyber Threat Grows As Vo1d Botnet Infects Millions Of Android TVs
- Written by Kiara Fabbri Former Tech News Writer
- Fact-Checked by Sarah Frazier Former Content Manager
A new variant of the Vo1d botnet has infected over 1.6 million Android TVs across more than 200 countries, raising serious cybersecurity concerns, According to an investigation by XLab .
In a Rush? Here are the Quick Facts!
- The botnet spreads via malicious apps and hides using advanced encryption.
- It generates fake ad traffic and can launch large-scale cyberattacks.
- Infected TVs broadcast AI-generated fake footage of Trump in a U.S. government building.
This botnet, which hijacks smart TVs and set-top boxes, has the potential to broadcast fake content, steal data, and launch large-scale cyberattacks.
The Vo1d botnet is a network of compromised devices controlled remotely by hackers. Cybersecurity researchers at XLab discovered that this latest version is more advanced than previous iterations, employing improved stealth techniques to evade detection.
The malware spreads through malicious apps or software downloads, allowing attackers to control infected devices without users’ knowledge.
Currently, the botnet is being used to generate fake ad traffic and run proxy networks for profit. However, its capabilities extend far beyond financial scams.
The botnet could be weaponized for devastating cyberattacks. Experts warn that with 1.6 million devices under its control, hackers could launch distributed denial-of-service (DDoS) attacks capable of overwhelming websites or even critical infrastructure.
Researchers warn that the botnet could spread disinformation, as shown by an incident in February 2025. In that case, AI-generated fake footage of Donald Trump was broadcast on televisions in the U.S. Department of Housing and Urban Development (HUD).
The footage depicted Trump bowing to kiss Elon Musk’s toes, with the caption “LONG LIVE THE REAL KING.” Staff at HUD were unable to stop the broadcast and had to unplug all the TVs.
The incident sparked public outrage and drew attention from the cybersecurity community, highlighting the growing risks of hacked smart devices like TVs and set-top boxes.
XLab argues that Smart TVs are especially vulnerable because they often lack robust security measures. Many users assume these devices are safe and fail to install protective software, while some manufacturers unknowingly ship devices with pre-installed malware.
These factors make Android-based TVs easy targets for large-scale botnets like Vo1d. Cybersecurity firms, including XLab, are actively working to track and dismantle the botnet, identifying key infrastructure used by the hackers. However, experts acknowledge that the botnet’s sophisticated encryption techniques make it difficult to neutralize.
To protect smart TVs and set-top boxes, users should regularly update software, avoid unofficial apps, and install security solutions tailored for smart devices. The growing prevalence of cyber threats targeting connected devices highlights the urgent need for stronger security measures in smart home technology.
Image by appshunter.io, from Unsplash
- Written by Kiara Fabbri Former Tech News Writer
- Fact-Checked by Sarah Frazier Former Content Manager
In a Rush? Here are the Quick Facts!
- The company softened its statement about never selling user data.
- Users criticized new terms granting Mozilla a license to use their input data.
- Mozilla says the license is needed for Firefox’s basic functionality.
The company has altered its long-standing promise that Firefox is designed to protect user privacy, and it has softened previous assurances about not selling user data.
However, ArsTechnica notes that the updated version clarifies that Mozilla is no longer making definitive claims about not selling data due to broad legal definitions of “sale” in certain jurisdictions.
The company did not specify which jurisdictions have these broad legal definitions. ArsTechnica reports that Mozilla’s updated terms of use have sparked criticism. One clause states that users grant Mozilla a license to use uploaded or inputted information to improve their browsing experience.
The clause reads: “When you upload or input information through Firefox, you hereby grant us a nonexclusive, royalty-free, worldwide license to use that information to help you navigate, experience, and interact with online content as you indicate with your use of Firefox.”
Users voiced their concerns on GitHub, Reddit, and Mozilla’s discussion forum. ArsTechnica reports that one user responded: “You cannot ask your users to give you these broad rights to their data. This agreement, as currently written, is not acceptable.”
In response to the backlash, Mozilla clarified its position in a blog post on Wednesday, stating that the license is necessary for Firefox’s core functions, as reported by ArsTechnica.
Despite Mozilla’s explanations, many users remain unconvinced. Mozilla has yet to provide further clarification on these policy changes, says ArsTechnica.
