Security Alert: SmartTube YouTube App for Android TV Compromised by Malicious Update

SmartTube YouTube Client Compromised: What You Need to Know

A recent security breach has compromised the popular open-source SmartTube YouTube client for Android TV. The attacker gained access to the developer’s signing keys, resulting in a malicious update being pushed to users.

The compromise was discovered when multiple users reported that Play Protect, Android’s built-in antivirus module, blocked SmartTube and warned of potential risks.

SmartTube’s developer, Yuriy Yuliskov, confirmed that his digital keys were compromised, leading to the injection of malware into the app. As a response, Yuliskov revoked the old signature and announced plans to release a new version with a separate app ID.

SmartTube, known for its ad-blocking feature and performance on underpowered devices, is widely used on Android TVs, Fire TV sticks, and similar devices.

An analysis of the compromised SmartTube version revealed a hidden native library named libalphasdk.so, which was not part of the public source code. This suspicious library runs in the background, registering the host device with a remote backend and sending metrics via encrypted channels.

Despite no evidence of malicious activity, the risk of potential threats remains high. Yuliskov has advised caution and recommended users to avoid logging in with premium accounts and to disable auto-updates.

While beta and stable test builds have been announced, they have not been released on the official GitHub repository. Transparency issues have arisen, with users urged to stick to older, known-safe builds until further information is provided.

Impacted users are advised to reset Google Account passwords, check for unauthorized access, and remove unrecognized services. The exact timeline of the compromise is unclear, with version 30.19 appearing to be safe according to some reports.

For more information on the compromised SmartTube versions and updates, contact has been made with Yuliskov for clarification.

Protect Your Business with Effective IAM Strategies