Google dismantles XCPE botnet with Chinese device maker
Original title: Police and Tech Firms Team Up to Dismantle XCPE Botnet
Google banned Videostrong after identifying backdoor in Android devices used for ad-fraud and malware.
Google collaborated with partners to dismantle the XCPE botnet containing over 1.3 million set-top boxes and other devices. The botnet was built into firmware by Videostrong and used for ad-fraud, proxy networks and installing additional malware. Google cut ties with Videostrong and banned them from preloading Google apps.
- Affected over 1.3 million devices
- Included telehealth, karaoke and digital signage
- Backdoor operated at android.uid.system level
- Disrupted C2 servers controlling over 10 million devices
Impact: ad-fraud, proxy networks and malware installation
- Vendors
- GoogleVideostrong
- Products
- Android set-top boxes
- Threat actors
- Videostrong
- Malware
- XCPEmalware modules
- Victims
- Android device users
- Countries
- China
From the original article
2 min read at infosecurity-magazine.com
Google and partners have taken down the XCPE botnet attributed to Chinese device maker Videostrong
By Phil Muncaster · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.