Vo1d malware botnet grows to 1.6 million Android TVs worldwide

Summary: A new variant of the Vo1d malware botnet has infected over 1.5 million Android TV devices globally, using them as part of anonymous proxy networks. Researchers highlight its advanced capabilities, including sophisticated encryption and resilient infrastructure, allowing it to thrive even after exposure. The botnet operates as a multi-purpose tool for cybercrime, engaging in activities such as ad fraud and illegal traffic relays.

Affected: Android TV devices

Keypoints :

• Vo1d botnet now has 1,590,299 infections across 226 countries.
• The botnet peaked at 800,000 active bots in January 2025.
• Nearly 25% of infections are from Brazil, with significant activity in South Africa and Indonesia.
• Vo1d uses a complex command and control infrastructure with over 21,000 domains and strong encryption for communication.
• Recommended security measures for users include purchasing from reputable sources, installing updates, and isolating IoT devices.