Google dismantles 1.3 million-device Android TV botnet, bans maker Videostrong
The gist
Google dismantled the XCPE botnet of over 1.3 million Android TV set-top boxes and banned China-based maker Videostrong.
The control servers are down, but the backdoor stays in firmware, so owners may need new devices.
How it unfolded
- late Oct 2026Google carries out the disruption, which it later describes as happening "last week" relative to its November 2 post; the exact day is not given.
- Nov 2, 2026Google announces it dismantled the XCPE backdoor and botnet of more than 1.3 million Android TV set-top boxes and attributes it with high confidence to Videostrong.
- Nov 2, 2026Google says it took down XCPE command-and-control servers used by more than a dozen related malware families, cutting off access to at least 10 million additional compromised devices, not all Android.