Wednesday 4 November
Global

Your region, kept on this device.

Google dismantles x.cpe botnet that infected 1.3 million Android TV boxes

Severity
High
Sources
2

has shut down a large network of hacked devices called , which at its peak ran on more than 1.3 million Android TV boxes. The boxes had passed Google's certification checks, but the malware was hidden in a way that slipped past screening and was installed after the devices were switched on and connected to the internet.

Like I’m new · Written by AI from 2 sources · Wrong?

What to do

  1. Check Android TV boxes on your network for the x.cpe or com.oemservice package, especially MECOOL devices.
  2. Consider removing or replacing uncertified or unmanaged Android set-top boxes and similar IoT devices.
  3. Segment IoT and streaming devices away from sensitive internal networks.

Written by AI from the sources, checked against them

Full story timeline · 2 updates

  1. Tue 3 NovemberGoogle dismantles botnet secretly running on 1.3 million Android TV boxesArs Technica (Security)
  2. Google dismantles massive botnet hidden in Android TV boxesThe Record

Who reported · 2 outlets

Ars Technica (Security)The Record

Who and what is in it

Malware

Report a problem