Skip to content
NewA calmer, faster ZeroHour
Data breachhighExploited in the wild

Google dismantles X.CPE botnet in Android TV boxes

Original title: Google dismantles massive botnet hidden in Android TV boxes

The Record ()4 min read
Part of a story covered by 16 sourcesGoogle Disrupts XCPE Botnet Linked to VideostrongMerged summary & timeline
AI summary · x-ai/grok-4.7Summaries by Vani AI

Google with partners takedown of X.CPE botnet affecting over 1.3 million Android TV set-top boxes linked to Videostrong Technology.

Google along with cybersecurity companies and Japanese law enforcement dismantled the X.CPE botnet hidden in more than 1.3 million set-top boxes across over 200 countries. The botnet was tied to Videostrong Technology, a Chinese OEM. Devices were turned into residential proxy network and loaded with other malware for revenue. Google cut ties with Videostrong and banned future devices with preloaded Google apps.

Unconfirmed: No response from Videostrong to requests for comment

Key facts
  • Affected over 1.3 million devices
  • Linked to Videostrong Technology
  • Botnet monetized via bandwidth resale and malware delivery
  • Updates to malware in 2024 and 2026
  • Tied to Japanese law enforcement and TrendAI
Security assessment · AI, from the articleExploited in the wild

Impact: Botnet compromising IoT devices for proxy and malware operations

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

From the original article

4 min read at therecord.media

The overwhelming majority of the infected devices in the X. CPE botnet are Android TV set-top boxes, Google said, adding that they observed a number of other infected Android-based IoT devices, including telehealth devices, karaoke machines and digital signage devices.

The Record

therecord.media

Read the full article at The Record

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.