Google's Threat Intelligence Group shut down the x.cpe botnet, which secretly operated on over 1.3 million Android TV boxes that were Google-certified. The malware, from Shenzhen-based Videostrong Technology, used obfuscation and a backdoor to bypass certification and install modules for residential proxy services and ad fraud.
Background
Google requires manufacturers to certify Android TV devices to access its apps and branding, but this incident shows how obfuscation and backdoor access can defeat the screening process.
- Source
- Ars Technica
- Published
- Nov 4, 2026 at 01:08 AM
- Score
- 8.0 / 10