Vo1d is a botnet associated with compromised Android TV boxes. In this BSides Lisbon 2025 talk, I present our team’s investigation, building on earlier public research by Dr.Web and XLab.
The session explains how malware analysis, DNS intelligence, and sinkhole telemetry complement one another when tracking the botnet. It also covers how collaboration between researchers can resolve investigative dead ends and how to communicate complex technical findings.
Event: BSides Lisbon, November 2025. Read the conference abstract.