Google says it dismantled Android TV botnet spanning more than 1.3 million devices, revokes Videostrong's licence
Google's Threat Intelligence Group attributes the XCPE backdoor to Chinese manufacturer Videostrong, saying it was built into device firmware and access to the backdoored devices was sold to criminal affiliates.
Google says it and industry partners have dismantled the XCPE botnet, which the company says infected more than 1.3 million Android TV streaming boxes, and has ended its relationship with Videostrong and revoked its licence to manufacture Android TV devices with preloaded Google apps and services. In a report published Monday, Google's Threat Intelligence Group said it attributes the botnet with high confidence to Chinese device maker Videostrong Technology Co, which it accuses of deliberately installing a persistent backdoor and selling access to criminal affiliates.