Google Shuts Down x.cpe Botnet Running on 1.3 Million Android TV Devices
Google's threat intelligence group shut down a botnet called x.cpe that ran on more than 1.3 million Android TV devices, working with Japan's National Police Agency and the security firm Lumen.
1 source 5d ago
Reporting from 1 source: GIGAZINE.
Why it matters
The x.cpe takedown shows that Google certification did not stop a partner from shipping devices with a backdoor, and the fix landed on the manufacturer's certification rather than on the devices already in homes.
Key Facts
- Google shut down the botnet x.cpe with Japan's National Police Agency and the security firm Lumen.
- x.cpe ran on more than 1.3 million Android TV devices.
- The network was found on devices from Shenzhen-based Videostrong Technology, sold mainly under the MECOOL brand.
- Google revoked Videostrong Technology's certification and banned it from manufacturing and selling Android devices.
- Infections were also confirmed on telemedicine equipment, karaoke machines, and digital signage devices.
Google found the network on devices from Shenzhen-based Videostrong Technology, sold mainly under the MECOOL brand. Google revoked the company's certification and banned it from making and selling Android devices.
Google traced x.cpe to Videostrong Technology, a Shenzhen company it had certified, and to hardware sold mainly under the MECOOL brand. The backdoor installed malware after setup finished and the device came online, and it turned off Play Protect, the tool that would have flagged the packages. Google says obfuscation got the devices through its review. The infections were not limited to televisions: Google also confirmed them on telemedicine equipment, karaoke machines, and digital signage.
Written with AI by Yomimono from the 1 cited source below, including Japanese-language reporting where cited. See our editorial policy.
Add Yomimono as a preferred source on Google