Google Says Videostrong Backdoor Powered Botnet That Enrolled More Than 1.3 Million Boxes

Google and its industry and law-enforcement partners disrupted the control systems for an XCPE botnet that enrolled more than 1.3 million set-top boxes, while leaving its firmware implant on affected devices. The control systems managed the botnet remotely. Disrupting them did not remove the implant already embedded in affected devices’ firmware. Google assessed with high confidence that Shenzhen-based Videostrong Technology Co. developed and operated the backdoor for financial gain, then sold criminal affiliates access to infected devices. Modules enabled ad fraud, residential proxy use — routing traffic through household internet connections — and the installation of additional malware.

Source: TokenPost