Google and partners dismantle XCPE botnet spanning 1.3 million devices

First reported by The Hacker News at · Updated · 20 sources

The network consisted mostly of Android TV boxes used for advertising fraud and routing strangers’ internet traffic through owners’ connections. Google says manufacturer Videostrong deliberately installed a backdoor and sold criminals access. The company has cut ties with Videostrong and banned it from making or selling certified Android devices.

  • The takedown occurred in late October, according to The Hacker News.
  • The operation evaded Google’s security tests for years, according to CyberScoop.

Covered by 20 publishers within 46 hours of the first report.

Reporting20

The Hacker News Google Disrupts 1.3 Million-Device Android Botnet, Says TV Box Maker Sold Criminal Access · info@thehackernews.com (The Hacker News)
Android Headlines Millions of Android TV devices were infected with a malware backdoor · Justin Diaz
Krebs on Security Tech Firms Dismantle Botnet That Turned 1.3M TV Boxes Into Proxies · BrianKrebs
SecurityWeek Google Dismantles XCPE Botnet of 1.3 Million Android Devices · Ionut Arghire
Security Affairs Inside XCPE, the botnet that turned set-top boxes into proxy servers · Pierluigi Paganini
Implicator.ai Preloaded: Google Says TV Boxes Shipped with a Backdoor · Marcus Schuler
iPhone in Canada Google Just Severed a Massive Botnet Infecting 1.3 Million Smart TVs · Usman Qureshi
The Next Web Google says a certified partner turned 1.3M Android TV boxes into a botnet · Ana Maria Constantin

Related

Topics GoogleAndroid