Live Feeds
● LIVE Updated 2h ago · 15 sources tracked

Tech Firms Dismantle Botnet That Turned 1.3M TV Boxes Into Proxies

Google and other technology firms have disrupted a botnet comprising 1.3 million Android TV and Google TV set-top boxes. The XCPE botnet operated by turning these devices into proxies for criminal activity. Google reports that a hardware partner provided criminals with access to the devices, enabling the installation of a malware backdoor. This access allowed operators to steal account data, record keystrokes, and capture screenshots from infected devices. Law enforcement and security teams have now worked to shut down the infrastructure.

🎙️

Listen to Live Briefing

Real-time synthesized voice briefing · Live Feeds Desk

⏱ ~3 min
Speed:
RSS Source map (15)
⚡ Key Developments & Real-Time Context
Text size:
  • ✓ A botnet consisting of 1.3 million Android TV boxes was dismantled.
  • ✓ The disrupted network is identified as the XCPE botnet.
  • ✓ The botnet turned set-top boxes into proxies.
  • ✓ Google reports that an Android partner sold access to criminals to facilitate the botnet.
🛡️ Source Corroboration: 15 independent reporting domains (90% confidence) ⏱ Read time: ~2 min

What changed

Google and security partners identified the XCPE botnet and neutralized the backdoor on 1.3 million devices.

Live updates

  1. Google and Tech Firms Dismantle 1.3 Million-Device Android Botnet

    Google and other technology firms have disrupted a botnet comprising 1.3 million Android TV and Google TV set-top boxes. The XCPE botnet operated by turning these devices into proxies for criminal activity. Google reports that a hardware partner provided criminals with access to the devices, enabling the installation of a malware backdoor. This access allowed operators to steal account data, record keystrokes, and capture screenshots from infected devices. Law enforcement and security teams have now worked to shut down the infrastructure.

    Why it matters

    Botnets of this scale allow attackers to mask their identity by routing traffic through legitimate home devices. The compromise of hardware partners creates a systemic risk where trusted manufacturers introduce vulnerabilities into the consumer supply chain.

    What is confirmed

    • A botnet consisting of 1.3 million Android TV boxes was dismantled.
    • The disrupted network is identified as the XCPE botnet.
    • The botnet turned set-top boxes into proxies.
    • Google reports that an Android partner sold access to criminals to facilitate the botnet.

    Still unconfirmed

    • The devices were manufactured by a Chinese firm called Videostrong.
    • Criminals used the access to capture screenshots, record keystrokes, and steal account data.

    What to watch next

    • Confirmation of the specific Android partner involved
    • Details on whether affected users received security patches
    • Law enforcement updates on the arrest of the botnet operators
    Sources used for this update (16)
    1. techcrunch.com — TechCrunch | Startup and Technology News
    2. www.theverge.com — Tech - The Verge
    3. www.techradar.com — TechRadar | the technology experts
    4. www.cnet.com — Tech - CNET
    5. www.pcmag.com — The Latest News in Technology | PCMag
    6. www.wired.com — WIRED - The Latest in Technology, Science, Culture and Business
    7. fortune.com — Big Tech News & Industry Analysis | Section - Fortune
    8. techcrunch.com — Latest News - TechCrunch
    9. www.enr.com — ENR 2026 Top 225 International Design Firms 1-100
    10. The Verge — One of Google’s Android partners turned 1.3 million set-top boxes into a botnet
    11. Google Cloud — Shutting the Door on the XCPE Botnet
    12. Krebs on Security — Tech Firms Dismantle Botnet That Turned 1.3M TV Boxes Into Proxies
    confidence 90%
📊

Community Sentiment: How do you assess this situation?

Voice your perspective · Real-time aggregated sentiment from the Live Feeds community