Google dismantles XCPE botnet in 1.3 million TV boxes and bans maker Videostrong
Google says Shenzhen maker Videostrong sold criminal access to boxes it built. The company used a ban and court orders to cut off the operation.
By Ryan Merket · Published
Primary source: cloud.google.com
Why it matters
A certified manufacturer allegedly turned its own firmware into paid criminal distribution, placing the compromise in the factory image itself.

Google said on November 2nd that it and industry partners had dismantled the XCPE backdoor, which had enrolled more than 1.3 million set-top boxes into a botnet. Google's account of the takedown says the disruption happened last week, placing the operation in late October. Google attributes the backdoor with high confidence to Videostrong Technology Co., an Android original equipment manufacturer and original design manufacturer based in Shenzhen.…
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.