Google disrupts 1.3 million-device Android TV botnet
Nov 2, 2026 · Summarized by Fundy Tech from 2 sources
Google says it cut off a 1.3 million-device Android TV botnet and banned Videostrong from certified Android devices. Owners cannot remove the hidden backdoor themselves.
Key points
- Google says Videostrong built x.cpe into boxes over several years.
- More than 1.3 million Android devices were linked to the botnet.
- Canada had about 26,000 to 42,000 infected devices.
- Google says it cut ties and banned Videostrong from certified Android devices.
Why it matters
If you use cheap streaming boxes, the risk may be built in at the factory, not added later. That can expose home internet connections and create unwanted traffic costs or security problems. Small businesses that use similar set-top devices should check their supplier and firmware sources.
Who’s affected: Android TV boxes and other infected devices
What to do
- Check the source of any Android TV box you use.
- Update devices where possible.
- Replace suspicious hardware from untrusted brands.
- Watch for unusual network traffic.
Original reporting
Not sure if this affects you?
Fundy Tech helps businesses and households across Atlantic Canada stay patched, protected and up to speed. Tell us what you’re running and we’ll tell you straight whether you need to act.