CYBERSECURITYTRACKER
Permanent story citation

Chinese Firm Built a Botnet With PreInfected Android Devices

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 12146

As cited

Copy frozen at (site build).

threat intel

Chinese Firm Built a Botnet With PreInfected Android Devices

Google disrupted a botnet run by Chinese manufacturer Videostrong that preinstalled XCPE malware in Android device firmware. The operator sold access to over 1 million compromised devices to criminal affiliates for advertising fraud, residential proxy misuse, and data theft. Affected devices included TV boxes, telehealth systems, and digital signage.

Why it matters: Practitioners managing Android deployments, particularly in healthcare and enterprise environments, should identify and patch vulnerable Videostrong devices to prevent further malware persistence and data exfiltration.

VendorsGoogle
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

threat intel

Chinese Firm Built a Botnet With PreInfected Android Devices

Google disrupted a botnet run by Chinese manufacturer Videostrong that preinstalled XCPE malware in Android device firmware. The operator sold access to over 1 million compromised devices to criminal affiliates for advertising fraud, residential proxy misuse, and data theft. Affected devices included TV boxes, telehealth systems, and digital signage.

Why it matters: Practitioners managing Android deployments, particularly in healthcare and enterprise environments, should identify and patch vulnerable Videostrong devices to prevent further malware persistence and data exfiltration.

VendorsGoogle
First seen by Cybersecurity Tracker

Source attribution

Glossary