Google disrupts million-device XCPE Android malware botnet, bans TV box maker
Google dismantles XCPE botnet of 1.3 million devices and bans Videostrong Technology Co for intentional malware installation.
80
Organization
National Police Agency
- Mentions · 7d3
- Mentions · 30d8
- All mentions12
- First seenSep 18, 2026
- Last mentioned6h ago
Timeline
12 articles · newest firstGoogle disrupts XCPE Android TV botnet tied to Videostrong
Google says more than 1.3 million set-top boxes carried the firmware backdoor and affiliate takedowns reach at least 10 million other devices.
76
Japan reports a wave of AI-assisted attacks on firms and agencies
Officials cite data on about 260 million people since April, while leak reports rose from 303 in September to 830 in October.
72
Microsoft takes down 3 major phishing platforms used by Chinese cybercriminals
Microsoft disrupted three Chinese phishing platforms that enabled more than 750 million impersonation messages.
80
Microsoft Disrupts Chinese-Language Phishing Market Behind 1B+ Messages
Microsoft seized domains used by YAM Store, CoGUI, and Iron Man after more than one billion phishing messages.
84
Germany Arrests Suspected Qilin Ransomware Leader After Japan Detention
Germany arrested a suspected Qilin leader extradited from Japan, while the gang kept listing new victims.
76
Japan confirms arrest of Russian Qilin operative, extradition to Germany
Japan arrested a 28-year-old Russian Qilin suspect in Osaka and extradited him to Germany.
66
Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data
Joint advisory says Integrity Technology Group-enabled Chinese actors steal data from critical infrastructure using botnets and hands-on hacking.
82
Meta Partners With Government Agencies, Law Enforcement, and Safety Organizations to Launch Regional Anti-Scam Education Campaign
Meta's One Step Ahead anti-scam campaign reached 303 million people across 18 Asia-Pacific countries.
32
North Korean Attackers Hit 30,000 Devices and Steal $10.7m
North Korea's WaterPlum infected about 30,000 devices and stole roughly $10.7 million in cryptocurrency.
82
Contagious Interview: 30,000 devices infected by a fake job interview
North Korea-linked WaterPlum infected over 30,000 devices through fake job interviews, stealing about $10.7 million.
84
North Korean hackers infect thousands of devices across 100 countries as part of ‘WaterPlum’ campaign
FBI and Japanese police advisory ties North Korea's WaterPlum campaign to $10.5M stolen from job seekers via fake-recruiter malware on 30,000 devices.
80
Related CVEs
by mentions- CVE-2015-330699%10.0Arbitrary file read/write via ProFTPD 1.3.5 mod_copy
- CVE-2019-11510100%10.0Unauthenticated Arbitrary File Read in Ivanti Pulse Connect Secure VPN
- CVE-2021-22205100%10.0Unauthenticated RCE in GitLab CE/EE via ExifTool Image Parsing (CVE-2021-22205)
- CVE-2021-319930%9.8Path Traversal RCE in ONLYOFFICE Document Server
- CVE-2016-308197%8.1Command injection RCE in Apache Struts Dynamic Method Invocation
- CVE-2015-5477100%7.5Remote denial of service in ISC BIND via TKEY queries
- CVE-2023-228944%4.9Sensitive-data leak in Strapi admin query filters (through 4.5.5)
- CVE-2014-6278100%—Remote OS Command Injection in GNU Bash via Crafted Environment (Shellshock-family)
Appears with
- Googlevendor · 4
- FBIorganization · 4
- WaterPlumthreat actor · 3
- TrendAIorganization · 3
- OtterCandymalware · 3
- BeaverTailmalware · 3
- OtterCookiemalware · 3
- StoatWafflemalware · 3
- Resecurityorganization · 3
- InvisibleFerretmalware · 3
- Microsoftvendor · 3
- Qilinmalware · 2
- XCPEmalware · 2
- Synthientorganization · 2
- Asahivictim · 2
- Microsoftorganization · 2
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.