Severity: HighAction: Be aware

Google, Partners Disrupts 1.3 Million-Device-Strong XCPE Botnet

Google alleges that Android device manufacturer Videostrong ran the operation, which infected set-top boxes and IoT devices with a backdoor to create infrastructure for criminal activity.

Excerpt from the primary source: Dark Reading

Who is affected

Home users · Small businesses

Affected technology: Android

What you should do · Be aware

No immediate action is indicated. Share this with the relevant teams and watch for updates.

Automated guidance based on this story's classification. Check the linked advisories for specifics.

Sources

We link to original and authoritative sources. Headlines and excerpts belong to their publishers.

Original reporting

Google, Partners Disrupts 1.3 Million-Device-Strong XCPE Botnet Dark Reading · darkreading.com · Nov 4, 2026 · Primary source
Severity: ElevatedAction: Be aware

Chrome Beta for Android Update

Hi everyone! We've just released Chrome Beta 158 (158.0.8127.22) for Android. It's now available on Google Play . You can see a partial list of the changes in the Git log . For details on new features, check out the Chromium blog , and for details on web platform updates, check here . If you find a new issue, please let us know by filing a bug . Chrome Release Team Google Chrome…

Severity: ElevatedAction: Patch

Chrome for Android Update

Hi, everyone! We've just released Chrome 157 (157.0.8103.38) for Android. It'll become available on Google Play over the next few days. This release includes stability and performance improvements. You can see a full list of the changes in the Git log . If you find a new issue, please let us know by filing a bug . Android releases contain the same security fixes as their corresponding Desktop releases (Windows &…

Severity: ElevatedAction: Be aware

Google dismantles massive botnet hidden in Android TV boxes

The overwhelming majority of the infected devices in the X.CPE botnet are Android TV set-top boxes, Google said, adding that they observed a number of other infected Android-based IoT devices, including telehealth devices, karaoke machines and digital signage devices.