Google disrupts 1.3 million device XCPE botnet
Original title: Google, Partners Disrupts 1.3 Million-Device-Strong XCPE Botnet
Google and partners disrupted an XCPE botnet controlling over 1.3 million Android devices, attributed to Videostrong Technology.
Google and industry partners disrupted the XCPE botnet, which infected over 1.3 million Android-based set-top boxes and IoT devices with a backdoor. The operation was attributed to Android device manufacturer Videostrong Technology Co. They took legal action against Videostrong to disrupt the domains and servers used for control. The botnet was used for criminal activity including ad-fraud and proxy networks.
Unconfirmed: The attribution has high confidence as stated by Google's Threat Intelligence Group.
- Over 1.3 million Android devices infected
- Attributed to Videostrong Technology Co.
- Partners include Japan's National Police Agency and others
- Disrupted C2 infrastructure
Impact: Backdoor access to devices for criminal modules
- 1.Disrupt command and control infrastructure
- Vendors
- GoogleVideostrong
- Products
- Android devices
- Threat actors
- Videostrong Technology
- Malware
- XCPE
- Countries
- Japan
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| md5 | 0c2bf78193ce890be6758a839f600144 | new-ways-hack-vehicles#recipe=similar-items&sourcecontentid=0c2bf78193ce890be6758a839f600144) Swipe, Plug-in, Pwned: Researchers Find New Ways to Hack |
| md5 | 54a575f7d010b9cbd0c2156a54d34c1e | ini-ai-panel-hijacking#recipe=similar-items&sourcecontentid=54a575f7d010b9cbd0c2156a54d34c1e) Bug in Google's Gemini AI Panel Opens Door to Hijacking b |
| md5 | 67c8a9b903f24a7d2a6105fe1eba82b0 | linux-vms-hide-windows#recipe=similar-items&sourcecontentid=67c8a9b903f24a7d2a6105fe1eba82b0) Pro-Russian Hackers Use Linux VMs to Hide in Windows by A |
| md5 | ed4866a711b169c66777cf3a2a5a810d | t-exposed-llm-services#recipe=similar-items&sourcecontentid=ed4866a711b169c66777cf3a2a5a810d) 2 Separate Campaigns Probe Corporate LLMs for Secrets by |
From the original article
8 min read at darkreading.com
Google alleges that Android device manufacturer Videostrong ran the operation, which infected set-top boxes and IoT devices with a backdoor to create infrastructure for criminal activity.
By Elizabeth Montalbano · darkreading.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.