Google Cuts Off TV Box Maker Over 1.3 Million-device Botnet Backdoor

WHO:

9to5Google - Google confirmed that Android TV device maker Videostrong intentionally preloaded a malware backdoor on certified devices.

TechRadar - The company accused of intentionally infecting its devices is described as Chinese.

TechRadar - The XCPE botnet involved more than 1.3 million Android TV streaming boxes.

WHAT:

9to5Google - Google severed ties with and banned Videostrong after discovering the backdoor.

TechRadar - Google led a takedown of the XCPE malware botnet.

TechRadar - The company allegedly sold criminals access to the botnet.

WHERE:

9to5Google - The backdoor was found on certified Android TV devices.

TechRadar - The botnet consisted of Android TV streaming boxes.

WHY:

9to5Google - Google cut ties with Videostrong because the company intentionally preloaded a backdoor used to control the XCPE botnet.

TechRadar - The alleged infection and sale of botnet access enabled criminal access.

HOW:

9to5Google - Videostrong allegedly placed a malware backdoor on its devices, allowing control of the XCPE botnet.

TechRadar - The company allegedly infected its devices with malware and later sold criminals access to the resulting botnet.

(UPDATED November 3, 2026 12:03 UTC)

Google says Videostrong intentionally installed a backdoor on certified Android TV devices, enabling botnet control. Google severed ties with the Chinese maker and banned it after discovering the malware. Google led a takedown of the XCPE botnet, involving over 1.3 million streaming boxes.