New Vo1d malware infects 1.3 million Android streaming boxes

**Executive summary:** Researchers (Dr.Web) have identified the Vo1d backdoor infecting roughly 1.3 million off-brand Android AOSP-based streaming boxes across more than 200 countries; the modular malware (components named vo1d, wd, and others) achieves persistence by modifying startup scripts (install-recovery.sh, daemonsu, debuggerd), can download and run executables, install APKs, and is linked to a published set of IOCs and mitigation guidance.