Tech Firms Dismantle Botnet That Turned 1.3M TV Boxes Into Proxies
Google said today it worked with industry partners to dismantle a botnet made up of more than 1.3 million Android TV set-top boxes that ship with malicious software which secretly rents the user's Internet connection out to strangers and conducts advertising fraud. Experts involved in the takedown say the action is likely to sever the botnet's access to more than 10 million additional compromised…
Google has dismantled a botnet composed of over 1.3 million Android TV set-top boxes that were secretly rented out to strangers and used for advertising fraud. Experts believe this action will sever the botnet's connection to over 10 million more compromised devices, including other Internet of Things (IoT) products like healthcare devices and karaoke machines.
The botnet, known as XCPE, was created by Videostrong Technology Co., a Chinese manufacturer. Google took legal action against Videostrong, dismantling its domains and servers. Other residential proxy providers, such as AppSalt, NetNut, EarnFM, Traffmonetizer, Jaguar, LINKFOG, BMW/IPWeb, and GaGaNode, are also linked to the botnet.
Google requires device makers to undergo compatibility and security testing, but Videostrong found a way to load their malware immediately after users first booted up their devices.
Written by urgent.news from KrebsOnSecurity's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
