Google Disrupts 1.3 Million-Device Android Botnet Linked to TV Box Maker

# Google Disrupts 1.3 Million-Device Android Botnet Linked to TV Box Maker

https://gcdradar.vercel.app/incidents/google-disrupts-1-3-million-device-android-botnet-linked-to · AIR-2026-1715 · live

- Lane: Breaches & attacks
- Severity: 3 (Confirmed exploitation): Confirmed large-scale botnet takedown involving compromised hardware.
- Fix status: No fix needed
- First reported: 2026-11-02 (happened 2026-10-30)
- AI role: No AI role
- Products: Videostrong Android TV boxes

## Summary

Google successfully disrupted a 1.3 million-device Android botnet operating primarily on TV set-top boxes. Investigators attribute the botnet to device maker Videostrong, which allegedly integrated backdoors to sell unauthorized network access.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2026-11-02: Google Disrupts 1.3 Million-Device Android Botnet, Says TV Box Maker Sold Criminal Access (https://thehackernews.com/2026/11/google-disrupts-13-million-device.html)

## Sources

- 2026-11-02 The Hacker News: Google Disrupts 1.3 Million-Device Android Botnet, Says TV Box Maker Sold Criminal Access https://thehackernews.com/2026/11/google-disrupts-13-million-device.html
- 2026-11-02 CyberScoop: Google shuts down global botnet running on certified Android devices https://cyberscoop.com/google-disrupts-xcpe-botnet-videostrong-android-devices
- 2026-11-04 Dark Reading: Google, Partners Disrupt 1.3 Million-Device-Strong XCPE Botnet https://darkreading.com/endpoint-security/google-13-million-device-strong-xcpe-botnet

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.