GoKawiilGoogle shuts down 1.3M-device Android TV botnet built on certified boxes
Google's Threat Intelligence Group dismantled x.cpe, a botnet that infected over 1.3 million Google-certified Android TV boxes, mostly sold under the MECOOL brand by Shenzhen-based Videostrong Technology. The malware used a backdoor to remotely install itself after devices went online, disabling Play Protect and evolving into a three-stage platform sold to third parties for residential proxying and ad fraud.