Shutting down the XCPE botnet | Google Cloud

Google and industry partners have dismantled the XCPE backdoor and botnet, which had drawn more than 1.3 million set-top boxes into a network that Google assesses was deliberately built and operated by Android device maker Videostrong Technology for financial gain. The infected devices were used for ad fraud, data theft and as residential proxies, and blocking the command-and-control domains is expected to cut attackers' control over at least 10 million more infected devices. It matters because it shows a device maker itself allegedly planting the malware, not a flaw exploited from outside — and Google has ended its partnership with Videostrong and barred it from making devices preloaded with Google apps.

• LinuxDo2026-11-03 02:01