# Police disrupt backdoor network infecting over 1.3 million Android devices

- URL: https://talkfuse.com/story/cops-bust-botnet-of-1-3m-infected-android-tv-boxes/
- Published: 2026-11-02T19:03:31+00:00
- Updated: 2026-11-02T20:47:45+00:00
- Original publisher: The Register
- Original article: https://www.theregister.com/cyber-crime/2026/11/02/cops-bust-botnet-of-13m-infected-android-tv-boxes/5307045
- Topics: Entertainment, Gadgets, Technology, TV

## Key points

- XCPE infected more than 1.3 million Android devices.
- Google says Videostrong embedded the backdoor for profit.
- Disrupted control domains may affect millions more devices.

## Summary

Security firms and Japan’s National Police Agency disrupted XCPE, a backdoor operation that infected more than 1.3 million Android devices worldwide. Google says Shenzhen-based Videostrong Technology intentionally built and embedded the backdoor in device firmware for financial gain, allowing criminals to use customers’ internet connections to conceal malicious traffic.

The coalition included Google, Lumen, Human Security, Plume, Synthient and TrendAI, which also disrupted domains used to control the malware. TrendAI recorded more than 3.8 million distinct home and mobile IP addresses connected to the operation between 3 June and 1 October; Google says cutting off affiliate control domains could also sever access to at least 10 million other compromised devices. Google has ended ties with Videostrong and barred it from making devices with preloaded Google apps.

---
Summarised by TalkFuse (https://talkfuse.com/). Quote the original publisher for the reporting and link this page for the summary and discussion.