Google leads takedown of massive XCPE malware botnet made of more than 1.3 million Android TV streaming boxes — and claims the items were intentionally set up for criminal access
A Chinese company allegedly intentionally infected its devices with malware and later sold access to a botnet to criminals.
A massive botnet consisting of over 1.3 million Android TV streaming boxes was dismantled, according to Google. The malware, known as XCPE, was preinstalled on the devices by manufacturer Videostrong. The company claims the devices were intentionally set up for criminal access. Google seized infrastructure, blocked Videostrong from Android certification, and strengthened device security checks.
Videostrong sold both legitimate Android devices and access to the botnet to cybercriminals. The botnet was used for ad fraud, dropper for additional malware, and assimilation into an illegal residential proxy network. Google joined forces with other companies and agencies in the operation, including Japan’s National Police Agency, Lumen, HUMAN Security, Plume, Synthient, and TrendAI.
The incident highlights the need for improved security checks for certified Android devices to prevent future occurrences.
Written by urgent.news from TechRadar's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
