Google dismantles botnet on 1.3 million Android TV boxes
Original title: Google dismantles botnet secretly running on 1.3 million Android TV boxes
Google seizes Videostrong domains, cutting off 10 million devices; Play Protect remains disabled on infected MECOOL boxes.
Google partnered with Japan’s National Police Agency, Synthient and Trend Micro to disrupt the x.cpe botnet running on Android TV boxes. The action took legal steps against Videostrong domains and servers. Trend Micro counted 1.47 million infected devices, mostly in Brazil, Malaysia, Iraq, Mexico and Taiwan.
Unconfirmed: Google estimates 10 million compromised devices; Trend Micro reports 1.47 million
- 1.3 million devices affected
- 1.47 million infected per Trend Micro
- MECOOL boxes of unknown origin at risk
- Play Protect still disabled
Impact: botnet control of 1.3 million Android TV boxes
- 1.check Play Protect status
- 2.verify box origin
- 3.monitor for suspicious apps
- Products
- Android TV boxesMECOOL
- Malware
- x.cpe network
- Victims
- users of Android TV boxes
From the original article
1 min read at arstechnica.com
Google has cut ties with the company behind the botnet campaign.
By Ryan Whitwam · arstechnica.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.