New Vo1d malware infects 1.3 million Android TV streaming boxes

A widespread Vo1d backdoor campaign has infected roughly 1.3 million off‑brand Android (AOSP) streaming boxes in over 200 countries; the malware uses modified startup scripts (install-recovery.sh, daemonsu, debuggerd) for persistence, comprises multiple components (vo1d, wd, encrypted daemons) that can download and execute payloads and install APKs, and Dr.Web has published IOCs and recommendations to update firmware and remove vulnerable devices from the internet.