Wednesday 4 November
Global

Your region, kept on this device.

Videostrong Technology Co.

Company

Security timeline

  1. Malware reported by Security AffairsGoogle dismantles XCPE botnet of 1.3 million set-top boxes allegedly run by Videostrong
  2. Malware reported by Krebs on SecurityGoogle and partners dismantle XCPE botnet of 1.3 million Android TV boxes
  3. Malware reported by CyberScoopGoogle shuts down XCPE botnet built into certified Android devices
  4. Malware reported by The VergeGoogle says Android partner Videostrong built botnet from 1.3 million set-top boxes

Recent news

Security Affairs· · High

Google dismantles XCPE botnet of 1.3 million set-top boxes allegedly run by Videostrong

and partners dismantled the backdoor, which enrolled more than 1.3 million Android TV set-top boxes in a botnet. Google assesses with high confidence that developed and ran it for profit, selling access to affiliates who loaded ad-fraud and residential proxy modules. Google has banned Videostrong from shipping devices with Google apps, and legal action targeted the domains and servers involved, with at least 10 million more compromised devices expected to lose access.

Krebs on Security· · High

Google and partners dismantle XCPE botnet of 1.3 million Android TV boxes

, working with industry partners, dismantled the XCPE botnet of over 1.3 million Android TV set-top boxes. The malware was loaded by , a Chinese manufacturer, which sold access to criminal affiliates and enabled residential proxy services that resold infected devices' IP addresses. Google took legal action against the domains and servers used to control the botnet, and says it has fixed the weakness that let the malware load at first boot.

CyberScoop· · High

Google shuts down XCPE botnet built into certified Android devices

, with several partners, dismantled the XCPE botnet, which had pre-installed on more than 1.3 million Android devices, mainly TV set-top boxes. The backdoor loaded malicious code after first boot, evading Google's testing, and was used for ad fraud, data exfiltration and residential proxy traffic. Google has banned Videostrong and any future subsidiaries from building or selling certified Android devices.

The Verge· · High

Google says Android partner Videostrong built botnet from 1.3 million set-top boxes

reports that , a Shenzhen-based manufacturing partner, built a backdoor into 1.3 million set-top boxes and formed a botnet from them. The devices were used for ad fraud, data exfiltration and routing unauthorised traffic, with Google saying the operation was intentional and financially motivated. Google has dismantled the backdoor, cut ties with the company and banned it from building or selling certified Android devices or supplying their software.

Last updated 3 November 2026. Facts come from our own stories, NVD and CISA KEV, MITRE ATT&CK and Wikidata, each named beside the fact; the introduction, when there is one, is from Wikipedia. We never show company logos.

Report a mistake