Android Captain
Smart TV

Google Shuts Down a 1.3M Android TV Box Botnet

Google dismantled the XCPE botnet and banned box maker Videostrong. Here's what it means for your streaming box.

By Sidharth · Nov 2, 2026
01 / 05

Google kills TV box botnet

Google dismantled XCPE, a backdoor that enrolled more than 1.3 million Android TV set-top boxes into a botnet.

02 / 05

The maker built it, Google says

Google says it is highly confident box maker Videostrong built the backdoor and sold access to criminal affiliates.

03 / 05

What the boxes were doing

Infected boxes acted as residential proxies, faked ad views and copied account details. Operators could take screenshots.

04 / 05

Tens of thousands in the US

The U.S. had roughly 26,000 to 42,000 infected devices. MECOOL-branded boxes are the ones researchers flagged most.

05 / 05

Unplug the cheap box

Resets may not clean it. Disconnect suspect boxes and buy streaming hardware from reputable, big-name brands instead.

Android Captain

Get the full story

Google Takes Down a 1.3 Million-Device Android TV Box Botnet, and Says the Box Maker Built It

Read the article