Google and NPA disable Chinese company’s backdoor into internet-connected devices
Over 1.3 million devices were affected by the backdoor and botnet.
This page is Both News's AI analysis of the article, not the article itself. Read the full story on the publisher's site.
Read the original articleThe Japan Times · japantimes.co.jpOur verdict
Political lean
0 = center. The further from 0, the stronger the lean (max 10).
Reporting balance
How complete and even-handed the reporting is — separate from which side it leans.
This is a straightforward, center-balanced cybercrime news report on a Google-NPA takedown with no left/right lean. Its strength is clear attribution and context, with multiple official sources and sourced loss figures. Readers should keep in mind that the intentional-wrongdoing claim comes from Google and police without a response from Videostrong or independent verification in the text.
- Why this lean
- The article reports a law-enforcement and industry takedown without left/right framing, partisan sources, or political adjectives. Attribution of wrongdoing is to a specific Shenzhen manufacturer Videostrong based on Google and NPA findings, not to a political party or ideology.
- Framing
- The story is told from the perspective of defenders taking down abuse, treating the central question as how the Videostrong backdoor worked and was disabled.
Key Findings
- 1Sourcing is one-sided but appropriate to a takedown announcement: all named sources are Google and Japanese authorities, with 4 distinct police/agency attributions and no response from Videostrong.
- 2Language stays neutral and attributed, e.g. quoting Google that the backdoor was "intentionally developed, deployed, and operated for financial gain" rather than asserting motive in the author's own voice.
- 3Provides useful explainer context: defines residential proxies as intermediary services routing traffic through household connections and notes they can hide identities and harvest personal data.
- 4Headline claim is supported by body: Shenzhen-based manufacturer Videostrong named, collaboration last week described, and device types specified.
- 5Includes concrete consumer history: July NPA warning against software from unknown providers, free VPNs, free streaming and bandwidth-sharing offers.
Who gets a voice
- GoogleTech company that co-led takedown, via blog postBackdoor was intentional for profit and has been dismantledMain voice
- National Police Agency (NPA)Japanese law enforcement agencyEnforcement and consumer-protection warning on residential proxiesMain voice
- Fukuoka Prefectural PoliceLocal police that first found infected devicesCase originated in unauthorized bank-transfer investigationMinor voice
- Kanto Regional Police Bureau Cyber Special Investigation UnitPolice cyber unitTraced manufacturing and sales circumstances and reported to GoogleMinor voice
- National Institute of Information and Communications TechnologyResearch instituteEstimates scale of residential proxies in JapanMinor voice
Dimension Breakdown
Multiple official sources cited (Google, NPA, two police units, NICT) but all on the takedown side; no accused-company or independent expert voice.
Plain attributed language throughout, e.g. quoted Google assessment; no partisan labels or emotive verbs.
Gives sourced figures: 1.3 million devices, 1,918 cases and approx. ¥2.89 billion damages in 2024, plus explainer of residential proxies.
Covers authorities and technical findings and consumer warning, but Videostrong was not quoted and no affected user is heard.
Headline about Google and NPA disabling backdoor matches body account of joint dismantling last week.
Explains residential proxies, device types, discovery timeline from Sept 2025, and July NPA consumer warning.
Missing Perspectives
- Videostrong response or denial is absent; matters because the article attributes intentional wrongdoing for financial gain to a named company.
- Affected device owners or sellers are not heard; matters for understanding how infections were discovered by users and what remediation is available.
- Independent cybersecurity researchers outside Google/NPA are absent; matters to corroborate scale and technical claims.
Highlighted Passages
“Google noted that the backdoor established by Videostrong appears to have been “intentionally developed, deployed, and operated for financial gain.””
Key Facts
- 1.3 million internet-connected devices made by Chinese company Videostrong were turned into residential proxies and infected with malware, according to Google and NPA reporting in the article
- Impacted devices are Android TV set-top boxes and other Android-based devices including karaoke machines and devices for telehealth and digital signage, according to Google
- Google said the backdoor was dismantled last week in collaboration with NPA and other partners, in a blog post published Tuesday
- Google assessed the backdoor appears to have been intentionally developed, deployed, and operated for financial gain, including selling access to criminal affiliates
- Case came to attention of Fukuoka Prefectural Police in September 2025 during investigation into unauthorized internet bank transfer, according to NPA
- NPA found unauthorized internet bank transfers in 2024 were connected to residential proxies in 1,918 cases causing about ¥2.89 billion ($18.3 million) in damages
- National Institute of Information and Communications Technology estimated at least several tens of thousands of residential proxy devices are operating within Japan
