Choose Rich Live
Tech

Google dismantles 1.3-million-device botnet and bans Android TV box maker Videostrong

Google has disrupted the XCPE botnet spanning more than 1.3 million Android TV set-top boxes and banned hardware maker Videostrong for intentionally preloading a malware backdoor.

A black streaming set-top box and remote control alongside cables with a Google logo in the background.
Image: @analyticsinme

Google and partner organizations have disrupted the XCPE botnet, a covert operation spanning more than 1.3 million Android TV set-top boxes worldwide. Alongside the action, Google severed ties with and banned device manufacturer Videostrong Technology after finding that the company intentionally preloaded malware into its hardware to enable control of the network.[1][2][3][4][5][7][8][9]

According to reporting by 9to5Google, Google confirmed that Videostrong snuck the backdoor onto certified Android TV products. RuntimeWire reported that the backdoor operated at system privilege levels and was engineered to automatically reinstall itself if users attempted to remove it.[1][7][8]

Key facts

  • Google and partners dismantled the XCPE botnet, which controlled over 1.3 million Android TV set-top boxes worldwide.
  • Google banned device manufacturer Videostrong after finding it intentionally preloaded a malware backdoor to control the XCPE botnet.
  • The backdoor ran at system privilege and reinstalled itself after users removed it, according to RuntimeWire.
  • The botnet operated covertly on certified Android TV devices and smart TVs.

Sources · 9 sources

  1. TE

    TechmemeArticle ·

    Google severs ties with and bans Android TV box maker Videostrong after finding it intentionally preloaded malware to open a backdoor to control the XCPE botnet (Ben Schoon/9to5Google) Ben Schoon / 9to5Google : Google severs ties with and bans Android TV box maker Videostrong after finding it intentionally preloaded malware to open a backdoor to control the XCPE botnet — Google has confirmed that an Android TV device maker snuck a backdoor for malware onto certified devices …

    Open source
  2. SE

    SecurityWeek@SecurityWeekPost on X ·

    Google Dismantles XCPE Botnet of 1.3 Million Android Devices https://t.co/QDHpqdZ7uq

    Open source
  3. NE

    NeowinFeed@NeowinFeedPost on X ·

    Google has disrupted the global XCPE botnet, an illegal operation that controlled over 1.3 million Android TV set-top boxes worldwide. #Google #AndroidTV #XCPE #bot https://t.co/hXE6iwNHtQ

    Open source
  4. TV

    The Verge@vergePost on X ·

    Google says a manufacturer ‘intentionally’ hijacked its devices with malware. https://t.co/qvVPBjDkQN

    Open source
  5. AI

    Analytics Insight@analyticsinmePost on X ·

    𝐆𝐨𝐨𝐠𝐥𝐞 𝐁𝐮𝐬𝐭𝐬 𝟏.𝟑 𝐌𝐢𝐥𝐥𝐢𝐨𝐧 𝐃𝐞𝐯𝐢𝐜𝐞 𝐁𝐨𝐭𝐧𝐞𝐭: 𝐀𝐧𝐝𝐫𝐨𝐢𝐝 𝐁𝐚𝐜𝐤𝐝𝐨𝐨𝐫 𝐄𝐱𝐩𝐨𝐬𝐞𝐝 Google has uncovered a major security breach involving more than 1.3 million Android devices. The XCPE botnet allegedly originated from Videostrong Technology, which secretly embedded malware into Android TV boxes and other connected products. Although Google has disrupted the operation, the firmware backdoor raises fresh concerns about device security and consumer privacy. #Google #AndroidBotnet #XCPEBotnet #CyberSecurity #AndroidTV #Malware #GoogleSecurity #analyticsinsight #analyticsinsightmagazine Read More 👇 https://t.co/il31jcLEn7

    Open source
  6. II

    iPhone in Canada@iPhoneinCanadaPost on X ·

    Google Just Severed a Massive Botnet Infecting 1.3 Million Smart TVs https://t.co/4o86Ey74dv

    Open source
  7. TE

    Techmeme@TechmemePost on X ·

    Google severs ties with and bans Android TV box maker Videostrong after discovering it intentionally preloaded a malware backdoor to control the XCPE botnet (@nexusben / 9to5Google) (Visit Techmeme dot com for the link and full context!)

    Open source
  8. R�

    RuntimeWire 🏴‍☠️@runtimewirePost on X ·

    Google says it and partners dismantled the XCPE botnet in 1.3M TV boxes and banned maker Videostrong. The backdoor ran at system privilege and reinstalled after users removed it. https://t.co/1QaXMAhVoy

    Open source
  9. AT

    Ars Technica@arstechnicaPost on X ·

    Google dismantles botnet secretly running on 1.3 million Android TV boxes https://t.co/SrdbZGdhfo

    Open source