Google, Partners Disrupt 1.3 Million-Device-Strong XCPE Botnet

Google and industry partners disrupted the XCPE botnet, a cybercriminal operation that planted a backdoor in more than 1.3 million Android-based set-top boxes, turning consumer devices into infrastructure for malicious activity.

"These secondary modules were conducting ad-fraud; silently enrolling infected devices into residential proxy networks; and loading additional malware onto XCPE-compromised devices."

Vulnerable Devices Ensnared in XCPE Most devices infected by the XCPE botnet were Android TV set-top boxes.

However, the botnet also included other Android-based IoT devices, including telehealth equipment, karaoke machines, and digital signage systems, according to Google.

Botnet Repercussions for Businesses Although the operation primarily targeted consumer devices, it has significant security implications for businesses and enterprise organizations.