- 21分钟前
新闻报报看 | 网络安全公司TrendAI公布，全球有147万台安卓设备被一个叫XCPE的僵尸网络感染，也就是被远程操控、替人做事的机器，而大马最多。（主播：颜江瀚、蔡心慧）
类别
🗞
新闻消息文字稿
00:00Before watching the video, remember to check out the more content on trending websites.
00:04Many people have TV boxes at home.
00:06I can buy it and watch dramas online without any restrictions.
00:08It just feels cost-effective and convenient when you calculate it.
00:12However, a recent survey data...
00:14This will startle anyone who has a TV box at home.
00:17That's Malaysia.
00:18It turns out to be the country with the most TV box addiction in the world.
00:22On November 2nd, cybersecurity company Trend AI released a statement.
00:27It is said that there are 1.47 million Android devices worldwide.
00:31Infected by a botnet called XCPE
00:34That is, being remotely controlled
00:36Doing things for others like this
00:38Malaysia accounted for 300,390 units.
00:41It accounts for roughly 20% of the global total.
00:43Ranked number one in the world
00:45It was almost twice as many as Brazil, which was in second place.
00:47In other words
00:48Of every five TV boxes worldwide that have been infected with the virus
00:51One of them is in a Malaysian's home.
00:54Many people believe that TV boxes contain viruses.
00:57I downloaded the app randomly.
00:58This time it's the opposite.
01:00The virus is present before the product leaves the factory.
01:02It was already written in the box.
01:04That is, the factory settings.
01:07This backdoor software is called XCPE.
01:10Some versions are called com.oem service
01:13Hidden inside the hardware
01:15That is, the layer of system software that controls the machine's startup.
01:18It also has system privileges.
01:19Users can't delete it at all.
01:21The box only needs to be turned on.
01:23Connect to the Internet
01:24He went to the remote server himself to report.
01:27Listen to instructions
01:28Secretly install apps
01:29The first thing I did was also to add Protect from Google Play.
01:32This refers to the built-in antivirus check in Android.
01:35Turn it off directly
01:37Many people have used it for several years.
01:38I have absolutely no idea what the box is doing behind the scenes.
01:41Um
01:41What's even more outrageous is...
01:43These poisoned TV boxes
01:46It's not just stealing your data.
01:48It turned that TV box into a Trojan horse.
01:50It turns your home network into a tool for others to make money.
01:54This practice is called residential agency.
01:57Simply put, it's about a third party paying for it.
01:59Borrowing your broadband IP address to access the internet
02:01Why should I borrow your house?
02:03Because home network IPs look most like those of ordinary people.
02:07Then if they want to use your IP
02:09To scam banks, advertisers, etc.
02:12These need to pass through that anti-fraud system.
02:14It's extremely easy.
02:15Because you look like an ordinary person
02:17And what about this Trend AI statistics?
02:19There were 3.84 million residential IP addresses in four months.
02:23It was used as an export
02:25An average of 180,000 people are online every day.
02:28In other words, someone is using your IP address to do bad things online.
02:31What does it look like in the records?
02:33It was sent from your house.
02:35You might think
02:36The TV box I bought is Google certified.
02:38It should be safe by now.
02:40Unfortunately, the box that got into trouble this time was one that had been certified.
02:44Google executives are highly confident that Google is...
02:46The back door was deliberately placed there by the Shenzhen manufacturer.
02:50Then sell the access rights to criminal groups
02:52Used for advertising fraud and other illicit activities
02:54Google's security team believes
02:56Judging from the fact that the XCPE backdoor is not simply a physical urban design, it is clear that it is not a purely physical feature.
03:00Rather, it was for the company's commercial interests.
03:02Deliberate development, deployment and operation
03:05Currently, Google has already acquired this company.
03:08Replace Android Certification Program
03:09It is prohibited from producing or selling certified equipment in the future.
03:12They also partnered with the Japanese National Police Agency and several cybersecurity companies.
03:16Turn off the control server.
03:19It is estimated that at least one other [unit/entity] was also cut off.
03:22Contact information for ten million poisoned devices
03:25According to reports, the most troublesome problem is...
03:28This virus or related settings
03:31It's difficult to delete or impossible to delete completely.
03:33Even if you want to restore factory settings
03:36What default setting?
03:37It will still reassemble itself from the hardware.
03:40Trend AI says that if you want to clean it thoroughly...
03:43You can only rely on the original manufacturer to handle it.
03:45Rely on platform protection or simply replace your device.
03:48So, what about viewers who have this type of TV box at home?
03:50The most practical thing to do is to disconnect from the internet first.
03:53And from then on, he refused all those of dubious origin.
03:56TV boxes that steal others' copyrights
03:58You think it's helping you steal other people's things.
04:01Stealing someone else's copyright to let you watch
04:02How do you know it's not stealing your privacy at the same time?
04:05Steal your IP
04:06Stealing your things to sell for money?
04:08The cheaper something is, the more likely it is to come with a price.
04:11That price could be your whole family's.
04:13Cybersecurity and privacy.
04:18me
04:20fly
04:43Subtitle volunteer Yang Qianqian