Google dismantles XCPE botnet in 1.3 million TV boxes and bans maker Videostrong

Google says Shenzhen maker Videostrong sold criminal access to boxes it built. The company used a ban and court orders to cut off the operation.

By · Published

Primary source: cloud.google.com

Why it matters

A certified manufacturer allegedly turned its own firmware into paid criminal distribution, placing the compromise in the factory image itself.

A gloved hand grips a door handle beside racks of electronic equipment with red lights and a Google Cloud logo.

Google said on November 2nd that it and industry partners had dismantled the XCPE backdoor, which had enrolled more than 1.3 million set-top boxes into a botnet. Google's account of the takedown says the disruption happened last week, placing the operation in late October. Google attributes the backdoor with high confidence to Videostrong Technology Co., an Android original equipment manufacturer and original design manufacturer based in Shenzhen.…

When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.

Reader comments

Conversation for this story loads after sign-in.