Google disrupts XCPE botnet and bans Videostrong Technology

# Google disrupts XCPE botnet and bans Videostrong Technology

https://gcdradar.vercel.app/incidents/google-disrupts-xcpe-botnet-and-bans-videostrong-technology · AIR-2026-1712 · live

- Lane: Breaches & attacks
- Severity: 4 (Confirmed real-world loss): Confirmed compromise of over 1.3 million devices.
- Fix status: No fix needed
- First reported: 2026-11-02
- AI role: No AI role
- Products: XCPE malware, Android TV set-top boxes

## Summary

Google dismantled the infrastructure of the XCPE botnet, which infected over 1.3 million Android TV set-top boxes via embedded firmware backdoors. The hardware manufacturer allegedly sold unauthorized access to criminal affiliates.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2026-11-02: Google disrupts million-device XCPE Android malware botnet, bans TV box maker (https://bleepingcomputer.com/news/security/google-disrupts-million-device-xcpe-android-malware-botnet-bans-tv-box-maker)
- 2026-11-02: Google disrupts XCPE botnet, bans the company behind it (https://helpnetsecurity.com/2026/11/02/xcpe-botnet-android-backdoor)

## Sources

- 2026-11-02 Help Net Security: Google disrupts XCPE botnet, bans the company behind it https://helpnetsecurity.com/2026/11/02/xcpe-botnet-android-backdoor
- 2026-11-02 BleepingComputer: Google disrupts million-device XCPE Android malware botnet, bans TV box maker https://bleepingcomputer.com/news/security/google-disrupts-million-device-xcpe-android-malware-botnet-bans-tv-box-maker

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.