Google shuts down XCPE botnet on Android devices
Original title: Google shuts down global botnet running on certified Android devices
Google dismantled the XCPE botnet infecting over 1.3 million Android devices sold by Videostrong after it evaded security checks.
Google and partners shut down the XCPE botnet implanted by Videostrong on approved Android devices including set-top boxes, telehealth devices, and digital signs. The botnet was used for ad fraud, data exfiltration, and malicious traffic routing. Google took legal action against the domains and servers controlling the botnet, banned Videostrong from certified Android devices, and disrupted access for over a dozen malicious actors. The operation spanned more than 170 countries.
- 1.3 million devices infected
- 10 million additional compromised devices disrupted
- Botnet used for ad fraud and data theft
- Devices from multiple manufacturers affected
- Spanned 170 countries with Malaysia, Brazil largest
Impact: control of devices for ad fraud and data theft
- Vendors
- GoogleVideostrong
- Products
- Android
- Malware
- XCPE
- Organizations
- Google Threat Intelligence Group
From the original article
3 min read at cyberscoop.com
Videostrong sold TV set-top boxes and other devices with pre-installed malware. The yearslong operation evaded Google’s security tests and established a botnet for cybercriminals. The post Google shuts down global botnet running on certified Android devices appeared first on CyberScoop.
By Matt Kapko · cyberscoop.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.