Tech Firms Dismantle Botnet That Turned 1.3M TV Boxes Into Proxies
Google's Threat Intelligence Group led a takedown of the XCPE botnet, which infected over 1.3 million set-top boxes sold by Chinese manufacturer Videostrong Technology Co. The malware secretly rented users' internet addresses to residential proxy services for resale, enabling advertising fraud and other abuse. The action is expected to sever access to millions of additional compromised IoT devices including healthcare systems and karaoke machines, disrupting a significant malicious infrastructure.
Key points
- 1.3M infected Android TV boxes dismantled; 10M+ additional IoT devices impacted
- Malware rented users' internet connections for proxy services and advertising fraud
- Videostrong Technology identified as responsible manufacturer; Google severed ties
Summary and key points written by AI from the headline and a short excerpt, so they can be incomplete or wrong. Krebs on Security did the reporting; read the original for the full story.
Read the full story at Krebs on Security