Google, Trend Micro and Japan police dismantle 1.3M-device Android TV botnet tied to Videostrong
A coalition including Google Threat Intelligence Group, TrendAI and Japan's National Police Agency disrupted a botnet of more than 1.3 million Android TV boxes and projectors spanning over 200 countries. Google says Shenzhen-based manufacturer Videostrong Technology deliberately built a backdoor called XCPE into device firmware and sold access to criminal affiliates, who installed malware modules to route traffic through unsuspecting owners' home networks. The group also took down command-and-control domains tied to affiliate modules and said it has cut ties with Videostrong, banning it from shipping devices with preloaded Google apps.