OMM Newsroom
Japanese police said a backdoor had turned 1.3 million internet-connected devices made by Chinese company “Videostrong” into residential proxies and infected them with malware, according to Anadolu Agency, citing The Japan Times.
“Google” said Tuesday that it had worked with Japan’s National Police Agency and other partners to dismantle the backdoor and the network of infected devices, known as a botnet, last week. The network was established by Shenzhen-based manufacturer “Videostrong”.
The affected devices include “Android TV” set-top boxes, karaoke machines and other internet-connected Android devices used for telehealth services and digital signage.
“We found this malicious software built directly into many different device models and brands over multiple years, supported by dedicated infrastructure and constantly evolving configurations to evade detection and manage their affiliates,” “Google” said. The company added that the backdoor appeared to have been “intentionally developed, deployed, and operated for financial gain.”
“Google” said “Videostrong” allegedly sold criminals access to the devices and helped install malware, enabling operators to capture screenshots, record keystrokes and steal sensitive account and device data.
The case came to light in September 2025, when police in Fukuoka investigated an unauthorised online bank transfer and found infected devices. A cybercrime unit later traced their manufacture and sale to “Videostrong” and alerted “Google”.
In July, the National Police Agency warned that smart TVs, routers and other connected devices could be hijacked and used as residential proxies. It urged consumers to avoid unverified apps, free VPNs and streaming services, as well as offers to share internet bandwidth for payment.
The agency linked residential proxies to 1,918 unauthorised bank transfers in 2024, resulting in losses of about 2.89 billion yen ($18.3 million).
Japan’s National Institute of Information and Communications Technology estimates that tens of thousands of residential proxy devices are operating in the country.
Residential proxies route internet traffic through household connections, allowing cybercriminals to hide their identities while carrying out malicious activities or stealing personal data.
