Google and Partners Shut Down XCPE, the Backdoor Behind 1.3M Set-Top Boxes

Google and four partners shut down XCPE, a backdoor at the system level that ran a botnet on over 1.3 million set-top boxes, monetized through proxy reselling and ad fraud. The shutdown contains what's confirmed down but doesn't prove each box was individually patched.

Share
Diagram of a two-stage botnet loader using HTTP bootstrap and MQTT channel on a set-top box