
Google Dismantles 1.3 Million Device XCPE Botnet Built by Videostrong
Videostrong built and operated XCPE backdoor in Android TV set-top boxes for ad fraud and proxy abuse, affecting over 1.3 million devices.
7 stories, newest first · one card per story

Videostrong built and operated XCPE backdoor in Android TV set-top boxes for ad fraud and proxy abuse, affecting over 1.3 million devices.

Google banned Videostrong Technology for preinstalled malware in 1.3M Android devices that also impacted over 10M additional systems.

Google says more than 1.3 million set-top boxes carried the firmware backdoor and affiliate takedowns reach at least 10 million other devices.
A GitLab project posted to Hacker News claims autonomous root on Tcl Android TV using CVE-2022-22706.

Claude Code users report removing TV packages over Wi-Fi without root, though some say agents bricked sets or stalled.

Anthropic warns small AI models may soon self-replicate on vulnerable IoT devices, without showing a live worm.

Unit 42 details Kimwolf v7, an Android TV botnet upgrade using HTTP/2 Chrome-fingerprint DDoS floods and Ethereum ENS-based C2 across 1.8M+ infected devices.
Today 1.5K readers · 2.4K views · 754 reads · all time 189K views