{
  "id": 17897270,
  "title": "Tech Firms Dismantle Botnet That Turned 1.3M TV Boxes Into Proxies",
  "url": "https://urgent.news/2026/11/03/tech-firms-dismantle-botnet-that-turned-1-3m-tv-boxes-into-proxies",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-11-03T02:24:31.000Z",
  "source": {
    "name": "KrebsOnSecurity",
    "slug": "krebsonsecurity",
    "url": "https://krebsonsecurity.com/2026/11/tech-firms-dismantle-botnet-that-turned-1-3m-tv-boxes-into-proxies/"
  },
  "original_language": "en",
  "account": "Google has dismantled a botnet composed of over 1.3 million Android TV set-top boxes that were secretly rented out to strangers and used for advertising fraud. Experts believe this action will sever the botnet's connection to over 10 million more compromised devices, including other Internet of Things (IoT) products like healthcare devices and karaoke machines. The botnet, known as XCPE, was created by Videostrong Technology Co., a Chinese manufacturer. Google took legal action against Videostrong, dismantling its domains and servers. Other residential proxy providers, such as AppSalt, NetNut, EarnFM, Traffmonetizer, Jaguar, LINKFOG, BMW/IPWeb, and GaGaNode, are also linked to the botnet. Google requires device makers to undergo compatibility and security testing, but Videostrong found a way to load their malware immediately after users first booted up their devices.",
  "summary": "Google said today it worked with industry partners to dismantle a botnet made up of more than 1.3 million Android TV set-top boxes that ship with malicious software which secretly rents the user's Internet connection out to strangers and conducts advertising fraud. Experts involved in the takedown say the action is likely to sever the botnet's access to more than 10 million additional compromised…",
  "key_points": [
    "Google dismantles XCPE botnet with over 1.3M Android TV boxes",
    "Videostrong Technology Co. created XCPE botnet, Chinese manufacturer",
    "Other residential proxy providers linked to XCPE botnet"
  ],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}