The Vo1d malware botnet found on 1.3 million devices back in September 2024 has grown significantly. According to a report from Xlab, a new variant has infected an additional 1.6 million Android TVs across 226 countries
That makes Vo1d one of the largest botnets seen in recent years, surpassing both Bigpanzi and even Mirai.
As of Februrary 2025, the largest sections of infected devices were seen in Brazil (25%), South Africa (13.6%), Indonesia (10.5%), Argentina (5.3%) and Thailand (3.4%).
The botnet, which has been compromising devices via an unknown vector, has apparently been recruiting new Android TV boxes as part of anonymous proxy server networks and has evolved with advanced encryption (RSA + custom XXTEA), resilient DGA-powered infrastructure and enhanced stealth capabilities.
Not only is Vo1d one of the largest botnets seen in recent years, far exceeding other sizable infections but it also
...
Keep reading this article on Tom's Guide.