12 publishers · first seen Mon, 02 Nov 2026 14:29 UTC · updated Wed, 04 Nov 2026 13:22 UTC
Google and its partners have dismantled the XCPE botnet, which infected over 1.3 million Android TV boxes. Google asserts that Videostrong Technology, a Shenzhen-based manufacturer, intentionally embedded the backdoor for financial gain. The malware, known as x.cpe, was built into the firmware of numerous device models and brands over several years. The operation involved Japan's National Police Agency, Lumen, HUMAN Security, Plume, Synthient, and TrendAI. Google has severed ties with Videostrong, banning it from producing certified Android devices and supplying software to other certified makers. The takedown has disrupted the botnet's operations, but the malware remains on infected devices and will reinstall itself if removed.
Content auto-generated. May contain inaccuracies.