# Google dismantles botnet secretly running on 1.3 million Android TV boxes

https://mins.news/en/item/127563

- Ars Technica, 2026-11-03 17:08 UTC
- Tech
- Original: https://arstechnica.com/google/2026/11/google-dismantles-botnet-secretly-running-on-1-3-million-android-tv-boxes/

> Google's Threat Intelligence Group says it shut down the x.cpe botnet, which at its peak operated on more than 1.3 million Google-certified Android TV devices. Google said obfuscation by Shenzhen-based Videostrong Technology evaded screening. Mostly sold as MECOOL products, the compromised boxes used a backdoor to install malware after setup and disable Play Protect.

## Related coverage

- [Google says Android partner turned 1.3 million devices into a botnet](https://mins.news/en/item/126100) — The Verge, 2026-11-02