Chinese manufacturer built a backdoor into 1.3 million TV boxes, and Google has knocked the network out

Google and a group of partners have dismantled the XCPE botnet, which the company says was deliberately built into more than 1.3 million Android devices, mostly TV boxes. Videostrong Technology, a hardware maker from Shenzhen, is said to be behind the backdoor. Google says Videostrong developed and operated the network for financial gain, The Register reports. Japan's National Police Agency took part, as did Lumen, Human Security, Plume and Synthient, among others.

The malicious code sat in the firmware and was only loaded after the first boot, which allowed the devices to pass Google's security tests, CyberScoop writes. According to Google, Videostrong sold access to criminal affiliates, who installed extra malware and could thus route traffic through the internet connections of unsuspecting households. Besides TV boxes, researchers also found karaoke machines, digital signage and telehealth devices. CyberScoop names Malaysia, Brazil, Iraq, Mexico and Taiwan as the hardest hit countries.

Google is banning Videostrong and any future subsidiaries from building or selling certified Android devices. Legal action took domains and servers offline, which Google says also cuts off access to at least 10 million other infected devices. Videostrong did not respond to questions from The Register.