Google Disrupts XCPE Botnet That Compromised 1.3 Million Android TV Boxes

Google and cybersecurity partners announced the disruption of XCPE, a botnet that infected more than 1.3 million Android TV set-top boxes worldwide. According to Google's Threat Intelligence Group, the malware was linked to Android device maker Videostrong Technology Co. and was embedded in the devices before they reached consumers. Once online, the compromised boxes could contact remote servers and download additional malicious modules. Operators reportedly monetised the devices through residential proxy networks, advertising fraud, and remote access, often without owners noticing any change in performance. The case highlights how supply-chain compromise of connected devices can turn ordinary home electronics into criminal infrastructure.