Google and partners dismantle XCPE botnet hidden in 1.3 million TV boxes
Synthient founder Benjamin Brundage traced the x.cpe backdoor to Videostrong, prompting Google to ban the Android maker from certified devices.
By Ryan Merket · Published
Primary source: X · @synthient
Why it matters
The case shows how cheap streaming hardware can become paid infrastructure for ad fraud, residential proxies and credential attacks before a buyer ever installs an app. It also shows a small threat-intelligence startup turning original device research into standing with Google, law enforcement and the Motion Picture Association.
Google, Synthient and a group of industry and law enforcement partners announced on November 2nd that they dismantled XCPE, a backdoor hidden in more than 1.3 million TV set-top boxes across more than 200 countries. The coordinated takedown was led by Google, Plume, TrendAI, Lumen, HUMAN Security and Synthient, working with Japan's National Police Agency.…
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.