Google leads takedown of massive XCPE malware botnet made of more than 1.3 million Android TV streaming boxes — and claims the items were intentionally set up for criminal access
- Google leads efforts to dismantle 1.3 million device residential proxy botnet built through malware preinstalled on Android hardware
- Researchers say manufacturer Videostrong intentionally shipped malware and sold botnet access to cybercriminals
- Google seized infrastructure, blocked the company from Android certification, and strengthened device security checks
Google has revealed its role in taking down a massive residential proxy network and the malware that built it - with the unusual twist that the developer was a seemingly legitimate business with multiple products and countless trusting customers.
In a blog post, the company said that together with its partners, it dismantled a backdoor called XCPE. This malware was apparently used for ad fraud, served as a dropper for additional malware, and used for assimilating devices into an illegal residential proxy network.
In total, more than 1.3 million set-top boxes alone were part of the network, the company said.
No supply chain attack
...
Copyright of this story solely belongs to www.techradar.com. To see the full text click HERE
