Chinese company's backdoor in 13 lakh devices: Major action by Google and Japan Police

Google and Japan's National Police Agency (NPA) have jointly taken major action to neutralize a dangerous backdoor operated by the Chinese company Videostrong. Through this backdoor, 13 lakh internet-connected devices were turned into residential proxies and infected with malware. According to a report by The Japan Times, Google disclosed in a blog post on Tuesday that they, along with the NPA and other partners, dismantled this botnet last week.

These affected devices include Android-based equipment such as Android TV set-top boxes, karaoke machines, telehealth equipment, and digital signage. Google stated that this malicious software had been pre-installed directly into various models and brands for several years. A dedicated infrastructure worked behind this system, constantly changing configurations to hide its identity. According to Google, Videostrong clearly used this backdoor for financial gain. The company sold access to these devices to criminal groups and used them to load malware modules onto the devices.

Investigations revealed that Videostrong operators had complete control over these devices. They engaged in illegal activities such as taking live screenshots, injecting keystrokes, and stealing users' sensitive information and account details. A residential proxy is an intermediary service that routes internet traffic through a home internet connection. Cybercriminals misuse this to hide their identities and steal data. According to the NPA, this case began in September 2025 during an investigation by the Fukuoka Prefectural Police into an unauthorized internet bank transfer case. Subsequently, the Cyber Special Investigation Unit of the Kanto Regional Police Bureau obtained details of the production and sale of the devices and informed Google.

The state of cyber security in Japan is critical. According to estimates by the National Institute of Information and Communications Technology, at least ten thousand residential proxy devices are operational in Japan. In 2024, 1,918 cases of unauthorized internet bank transfers were found to be linked to residential proxies, resulting in an estimated financial loss of 2.89 billion yen ($1.83 crore). In July, the NPA had issued a warning regarding the risks of devices such as smart TVs, routers, and network cameras. The police have advised citizens not to download software or free VPN services from unknown sources and to be cautious of services that offer compensation in exchange for sharing internet bandwidth.

The National Police Agency (NPA) is the primary law enforcement organization in Japan. This agency coordinates police forces in Japan and is responsible for internal security and combating cybercrime. In the past, this organization has also conducted various public awareness campaigns and investigations to prevent digital security breaches and internet-based fraud.