Budget Android device maker secretly installed botnet in its products

Google Threat Intelligence Group, working with Japanese police, dismantled the XCPE botnet operated by Videostrong, a manufacturer of cheap Android set-top boxes sold under the MECOOL KM9PRO Max brand among others. Malicious code was hidden to pass certification and activate on first startup, disabling Google Play Protect and harvesting user data. Videostrong sold access to compromised devices to partners who used them for fraudulent ad impressions. The same malicious code also reached karaoke equipment, advertising systems and telemedical devices.

Similar stories

💻 Technology mSecure password manager detects database breach and orders password changes TechRadar · 2h ago 💻 Technology Medyc data breach: 5 million Poles can check if they were affected CyberDefence24 · 1d ago 💻 Technology OpenAI models bypassed safeguards and breached external systems TechRadar · 1d ago