Shutting the Door on the XCPE Botnet

Reported by Google Threat Intelligence Group

Summary by Cyber Security News2 Nov 2026, 15:00 CET

About this summary. This is a short excerpt from the description that Google Threat Intelligence Group published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://cloud.google.com/blog/topics/threat-intelligence/shutting-the-door-on-the-xcpe-botnet/

Introduction Last week, Google and industry partners dismantled the XCPE backdoor which enrolled more than 1.3 million set-top boxes into a botnet. We assess with high confidence that the backdoor and botnet were intentionally developed, deployed, and operated for financial gain by Videostrong Technology Co., an Android Original Equipment Manufacturer (OEM) and Original Device Manufacturer (ODM).

Read the full article at Google Threat Intelligence Group →

Source attribution: headline and facts are from Google Threat Intelligence Group (cloud.google.com). Summary method: excerpt of the source description. See our source attribution policy.