Nearly 1.6 million Android TV devices have been affected by the Vo1d malware.
Although Vo1D has not arrived in the United States in significant quantities, it serves as a reminder of the importance of keeping all our connected devices secure, including televisions.
A study conducted by researchers from Xlab has revealed that a new variant of the Vo1d botnet has been affecting Android TV devices worldwide. At its peak, on January 14, 2025, the botnet reached nearly 1.6 million devices distributed across more than 200 countries and regions. Although the number of active bots has declined since then, a resurgence in infections has been observed since February 21, with daily figures ranging from 800,000 to over 1.1 million.
The research indicates that "the large scale of Vo1d and its ongoing evolution pose a global cybersecurity threat." Furthermore, its ability to operate undetected for over three months highlights its stealthy nature. During the data collection period from February 1 to 15, the majority of infections were reported in Brazil (24.97%), South Africa (13.6%), Indonesia (10.54%), and Argentina (5.27%). Both the United States and Canada are not among the top 15 countries with the highest infection rates, with Ecuador holding the 15th position at 1.04% of cases.
Although the Vo1d malware has not yet had a significant impact in North America, this serves as a reminder of the importance of having proper security practices with connected devices. It is essential to remember that TVs are constantly connected and are as vulnerable to online attacks as computers and mobile devices.
One of the most relevant actions that can be taken is to update the firmware or operating system to the latest version. In the case of TVs, this option is generally found in the System or About this TV menu. It is also advisable to ensure that system updates are automatic to avoid missing something important that could protect the device. Additionally, it is recommended to only install applications from the Google Play Store and to avoid installing apps from untrusted sources.
