Google dismantles botnet secretly running on 1.3 million Android TV boxes
Summary
Google’s Threat Intelligence Group shut down the x.cpe botnet that abused 1.3 million Android TV boxes, including many Google-certified devices. The operation disclosed a multi-stage malware platform, backdoors to install modules, and disabled Play Protect, with legal actions taken against the operators and attention to device certification shortcomings.