Tech Firms Dismantle Botnet That Turned 1.3M TV Boxes Into Proxies
Google severed ties with Videostrong after its malware turned 1.3M Android devices into residential proxies for criminals.
Google dismantled the XCPE botnet using preinstalled malware from Videostrong Technology on more than 1.3 million Android TV set-top boxes. The infection also affected telehealth devices, karaoke machines and digital signage. Partners including Synthient and Oxylabs were credited; domains and servers were taken down to disrupt proxy and ad fraud services.
- XCPE malware loaded via first boot
- Devices offered as distribution for criminal affiliates
- Linked to proxy providers including AppSalt/Honeygain
- Google banned Videostrong from Android certification
- Impacted other Android-based IoT products
Impact: Devices rented for criminal proxies and advertising fraud
- 1.Upgrade to fixed firmware
- 2.Check for preinstalled packages in OEM partition
- 3.Use trusted app stores and Play Protect
- Vendors
- GoogleVideostrong Technology
- Products
- Android TV set-top boxes
- Malware
- XCPE
- Victims
- Android device users
- Countries
- China
From the original article
5 min read at krebsonsecurity.com
Google said today it worked with industry partners to dismantle a botnet made up of more than 1. 3 million Android TV set-top boxes that ship with malicious software which secretly rents the user's Internet connection out to strangers and conducts advertising fraud.
By BrianKrebs · krebsonsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.