Quote:A Mirai botnet variant called Pandora has been observed infiltrating inexpensive Android-based TV sets and TV boxes and using them as part of a botnet to perform distributed denial-of-service (DDoS) attacks.https://thehackernews.com/2023/09/mirai-...mtb%2e24o0
Doctor Web said the compromises are likely to occur either during malicious firmware updates or when applications for viewing pirated video content are installed.
"It is likely that this update has been made available for download from a number of websites, as it is signed with publicly available Android Open Source Project test keys," the Russian company said in an analysis published Wednesday.
"The service that runs the backdoor is included in boot.img," enabling it to persist between system restarts.
A fun and fascinating little read, their persistence techniques are actually pretty clever too.



![[Image: support-blue.png]](https://hackforums.net/images/hfnews/support-blue.png)


