Google Disrupts 1.3 Million-Device Android Botnet, Says TV Box Maker Sold Criminal Access
AI-summarised brief · reviewed before publication
Google led a takedown in late October of a botnet controlling more than 1.3 million Android devices, chiefly TV set‑top boxes, after determining Shenzhen‑based Videostrong deliberately embedded a backdoor called x.cpe and sold access to criminal operators. The malware turned boxes into residential proxies and ad‑fraud platforms, disabling Play Protect and allowing silent app installs, screen captures, keystroke logging and reverse shells. Google used action to shut down the command‑and‑control domains and those of over a dozen related malware families, with assistance from Japan’s National Police Agency, Lumen, HUMAN Security, Plume, Synthient and TrendAI. The operation is expected to cut off the botnet’s reach to at least 10 million infected devices. Google has banned Videostrong and any affiliates from producing certified Android hardware.
💡 Why It Matters
- · It exposes how low‑cost consumer hardware can become a covert weapon for large‑scale fraud, forcing manufacturers and regulators to rethink firmware security standards.
