By Jay Bonggolto
Publication Date: 2026-11-03 13:05:00
Google has taken down a huge Android malware operation that turned over 1.3 million Android TV boxes into weapons for cyber criminals.
The company revealed that the operation was performed by Videostrong Technology, a device maker that has been accused of intentionally putting a hidden backdoor on its products and selling access to criminal affiliates.
The malware, dubbed XCPE or x.cpe, was directly embedded in the firmware of Android TV boxes sold under different brands. Google’s Threat Intelligence Group said that Videostrong developed the backdoor as a business, not letting it slip through accidentally. Criminal partners could use infected devices to generate fake ad views, reroute internet traffic through unsuspecting homes, and install more malware.
Latest Videos FromAndroid Central
A backdoor that gives criminals control of your TV box
Google is…



