Cops bust botnet of 1.3M infected Android TV boxes
Videostrong Technology, a Shenzhen-based hardware maker, intentionally pre-installed the XCPE backdoor in Android TV boxes and projectors, then sold access to criminal groups. The backdoor, disguised as a remote management tool, connected to an MQTT server giving operators full device control to deploy malware, create proxy networks, and hide malicious traffic across customers' internet connections. The disruption involved Google, Lumen, Human Security, Plume, Synthient, and TrendAI across more than 200 countries.
Key points
- 1.3M infected Android devices across 200+ countries disrupted
- XCPE backdoor deliberately embedded by Videostrong Technology
- Criminal groups gained access to build botnets and deploy malware
- Coalition included Google, Lumen, and five security partners
Summary and key points written by AI from the headline and a short excerpt, so they can be incomplete or wrong. The Register did the reporting; read the original for the full story.
Read the full story at The Register
