As cited
Copy frozen at (site build).
threat intel
Shutting the Door on the XCPE Botnet
Google and partners dismantled the XCPE botnet, which infected over 1.3 million Android set-top boxes through pre-installed malware created by Videostrong Technology. The backdoor enabled Videostrong to sell access to criminal affiliates who deployed ad-fraud, residential proxy, and additional malware modules onto compromised devices. Google has banned Videostrong from the Android ecosystem, taken down command and control infrastructure affecting at least 10 million additional devices, and implemented stronger firmware integrity checks to prevent similar attacks.
Why it matters: Device manufacturers, retailers, and distributors must audit Android TV and set-top box suppliers for supply-chain backdoors; security teams should monitor for XCPE indicators of compromise and block associated domains and infrastructure; consumers purchasing connected devices face persistent malware infection risks from unvetted manufacturers.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
threat intel
Shutting the Door on the XCPE Botnet
Google and partners dismantled the XCPE botnet, which infected over 1.3 million Android set-top boxes through pre-installed malware created by Videostrong Technology. The backdoor enabled Videostrong to sell access to criminal affiliates who deployed ad-fraud, residential proxy, and additional malware modules onto compromised devices. Google has banned Videostrong from the Android ecosystem, taken down command and control infrastructure affecting at least 10 million additional devices, and implemented stronger firmware integrity checks to prevent similar attacks.
Why it matters: Device manufacturers, retailers, and distributors must audit Android TV and set-top box suppliers for supply-chain backdoors; security teams should monitor for XCPE indicators of compromise and block associated domains and infrastructure; consumers purchasing connected devices face persistent malware infection risks from unvetted manufacturers.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
threat intel
Shutting the Door on the XCPE Botnet
Google and partners dismantled the XCPE botnet, which infected over 1.3 million Android set-top boxes through pre-installed malware created by Videostrong Technology. The backdoor enabled Videostrong to sell access to criminal affiliates who deployed ad-fraud, residential proxy, and additional malware modules onto compromised devices. Google has banned Videostrong from the Android ecosystem, taken down command and control infrastructure affecting at least 10 million additional devices, and implemented stronger firmware integrity checks to prevent similar attacks.
Why it matters: Device manufacturers, retailers, and distributors must audit Android TV and set-top box suppliers for supply-chain backdoors; security teams should monitor for XCPE indicators of compromise and block associated domains and infrastructure; consumers purchasing connected devices face persistent malware infection risks from unvetted manufacturers.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
threat intel
Shutting the Door on the XCPE Botnet
Google and partners dismantled the XCPE botnet, which infected over 1.3 million Android set-top boxes through pre-installed malware created by Videostrong Technology. The backdoor enabled Videostrong to sell access to criminal affiliates who deployed ad-fraud, residential proxy, and additional malware modules onto compromised devices. Google has banned Videostrong from the Android ecosystem, taken down command and control infrastructure affecting at least 10 million additional devices, and implemented stronger firmware integrity checks to prevent similar attacks.
Why it matters: Device manufacturers, retailers, and distributors must audit Android TV and set-top box suppliers for supply-chain backdoors; security teams should monitor for XCPE indicators of compromise and block associated domains and infrastructure; consumers purchasing connected devices face persistent malware infection risks from unvetted manufacturers.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
threat intel
Shutting the Door on the XCPE Botnet
Google and partners dismantled the XCPE botnet, which infected over 1.3 million Android set-top boxes through pre-installed malware created by Videostrong Technology. The backdoor enabled Videostrong to sell access to criminal affiliates who deployed ad-fraud, residential proxy, and additional malware modules onto compromised devices. Google has banned Videostrong from the Android ecosystem, taken down command and control infrastructure affecting at least 10 million additional devices, and implemented stronger firmware integrity checks to prevent similar attacks.
Why it matters: Device manufacturers, retailers, and distributors must audit Android TV and set-top box suppliers for supply-chain backdoors; security teams should monitor for XCPE indicators of compromise and block associated domains and infrastructure; consumers purchasing connected devices face persistent malware infection risks from unvetted manufacturers.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
threat intel
Shutting the Door on the XCPE Botnet
Google and partners dismantled the XCPE botnet, which infected over 1.3 million Android set-top boxes through pre-installed malware created by Videostrong Technology. The backdoor enabled Videostrong to sell access to criminal affiliates who deployed ad-fraud, residential proxy, and additional malware modules onto compromised devices. Google has banned Videostrong from the Android ecosystem, taken down command and control infrastructure affecting at least 10 million additional devices, and implemented stronger firmware integrity checks to prevent similar attacks.
Why it matters: Device manufacturers, retailers, and distributors must audit Android TV and set-top box suppliers for supply-chain backdoors; security teams should monitor for XCPE indicators of compromise and block associated domains and infrastructure; consumers purchasing connected devices face persistent malware infection risks from unvetted manufacturers.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
threat intel
Shutting the Door on the XCPE Botnet
Google and partners dismantled the XCPE botnet, which infected over 1.3 million Android set-top boxes through pre-installed malware created by Videostrong Technology. The backdoor enabled Videostrong to sell access to criminal affiliates who deployed ad-fraud, residential proxy, and additional malware modules onto compromised devices. Google has banned Videostrong from the Android ecosystem, taken down command and control infrastructure affecting at least 10 million additional devices, and implemented stronger firmware integrity checks to prevent similar attacks.
Why it matters: Device manufacturers, retailers, and distributors must audit Android TV and set-top box suppliers for supply-chain backdoors; security teams should monitor for XCPE indicators of compromise and block associated domains and infrastructure; consumers purchasing connected devices face persistent malware infection risks from unvetted manufacturers.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
threat intel
Shutting the Door on the XCPE Botnet
Google and partners dismantled the XCPE botnet, which infected over 1.3 million Android set-top boxes through pre-installed malware created by Videostrong Technology. The backdoor enabled Videostrong to sell access to criminal affiliates who deployed ad-fraud, residential proxy, and additional malware modules onto compromised devices. Google has banned Videostrong from the Android ecosystem, taken down command and control infrastructure affecting at least 10 million additional devices, and implemented stronger firmware integrity checks to prevent similar attacks.
Why it matters: Device manufacturers, retailers, and distributors must audit Android TV and set-top box suppliers for supply-chain backdoors; security teams should monitor for XCPE indicators of compromise and block associated domains and infrastructure; consumers purchasing connected devices face persistent malware infection risks from unvetted manufacturers.
- Source published
- First seen by Cybersecurity Tracker