news
Android’s November 2026 Updates Patch Over 200 Vulnerabilities and Botnet of 1.3 Million Android Devices
-
Security Week ☛ Android’s November 2026 Updates Patch Over 200 Vulnerabilities
The most severe is a critical flaw in Framework leading to remote code execution without user interaction.
-
Security Week ☛ Google Dismantles XCPE Botnet of 1.3 Million Android Devices
The botnet was created and operated for financial gain by Android OEM/ODM Videostrong Technology.
-
CNX Software ☛ 1.3 million Google-certified Android TV boxes found to have malware [Ed: Title revised later]
-
CNX Software ☛ (Some) Google-certified Android TV boxes found to have malware
You might assume that a Google-certified Android TV box will both work better and guarantee no malware. However, you’d be wrong, at least for the latter. Surveillance Giant Google has just published a new Threat Intelligence report entitled “Shutting the Door on the XCPE Botnet”, where they found that 1.3 million TV boxes were infected by the XCPE backdoor, enrolling them into a botnet used for financial gains. Surveillance Giant Google assesses with high confidence that the malware was intentionally developed, deployed, and operated by Videostrong Technology, a TV box manufacturer, which we frequently covered in the past when Android TV boxes were still somewhat a novelty and at times usable as an alternative to SBCs running Linux. Videostrong apparently monetized the backdoor by allowing affiliates to load malware modules onto infected devices to run ad-fraud schemes, enroll the TV boxes in residential proxy networks, and so on.
-
The Record ☛ Google dismantles massive botnet hidden in Android TV boxes
The overwhelming majority of the infected devices in the X.CPE botnet are Android TV set-top boxes, Google said, adding that they observed a number of other infected Android-based IoT devices, including telehealth devices, karaoke machines and digital signage devices.
TH late:
-
Certified Android TV manufacturer put unauthorized backdoor in 1.3 million set-top boxes, Surveillance Giant Google reveals
Google discovered and shut down a backdoor built into millions of Surveillance Giant Google TV and Android TV set-top boxes built by Videostrong Technology Co.