{"id":226263,"date":"2025-12-02T00:32:39","date_gmt":"2025-12-02T06:32:39","guid":{"rendered":"https:\/\/lifeboat.com\/blog\/2025\/12\/smarttube-youtube-app-for-android-tv-breached-to-push-malicious-update"},"modified":"2025-12-02T00:32:39","modified_gmt":"2025-12-02T06:32:39","slug":"smarttube-youtube-app-for-android-tv-breached-to-push-malicious-update","status":"publish","type":"post","link":"https:\/\/lifeboat.com\/blog\/2025\/12\/smarttube-youtube-app-for-android-tv-breached-to-push-malicious-update","title":{"rendered":"SmartTube YouTube app for Android TV breached to push malicious update"},"content":{"rendered":"<p><a class=\"aligncenter blog-photo\" href=\"https:\/\/lifeboat.com\/blog.images\/smarttube-youtube-app-for-android-tv-breached-to-push-malicious-update.jpg\"><\/a><\/p>\n<p>The popular open-source SmartTube YouTube client for Android TV was compromised after an attacker gained access to the developer\u2019s signing keys, leading to a malicious update being pushed to users.<\/p>\n<p>The compromise became known when multiple users reported that Play Protect, Android\u2019s built-in antivirus module, <a href=\"https:\/\/github.com\/yuliskov\/SmartTube\/issues\/5131#issue-3670629826\" target=\"_blank\" rel=\"nofollow noopener\">blocked SmartTube on their devices<\/a> and warned them of a risk.<\/p>\n<p>The developer of SmartTube, Yuriy Yuliskov, admitted that his digital keys <a href=\"https:\/\/github.com\/yuliskov\/SmartTube\/releases\/tag\/notification\" target=\"_blank\" rel=\"nofollow noopener\">were compromised<\/a> late last week, leading to the injection of malware into the app.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>The popular open-source SmartTube YouTube client for Android TV was compromised after an attacker gained access to the developer\u2019s signing keys, leading to a malicious update being pushed to users. The compromise became known when multiple users reported that Play Protect, Android\u2019s built-in antivirus module, blocked SmartTube on their devices and warned them of a [\u2026]<\/p>\n","protected":false},"author":427,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[34,6],"tags":[],"class_list":["post-226263","post","type-post","status-publish","format-standard","hentry","category-cybercrime-malcode","category-robotics-ai"],"_links":{"self":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts\/226263","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/users\/427"}],"replies":[{"embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/comments?post=226263"}],"version-history":[{"count":0,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts\/226263\/revisions"}],"wp:attachment":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/media?parent=226263"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/categories?post=226263"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/tags?post=226263"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}