Google Disrupts 1.3M-Device Android TV Box Botnet; Maker Sold Access

Mon, 02 Nov 2026 20:44:36 +0000

Engineer — Skip
SOC/IR — Learn: Residential-proxy botnets built from compromised consumer hardware can route malicious traffic through home IPs, complicating geo-based blocking; no IOCs were published and the C2 infrastructure was already disrupted, so there is no immediate hunt to run.
Leader — Learn: An OEM intentionally shipping backdoored hardware at scale is a meaningful supply-chain integrity data point for hardware procurement policies, though the affected devices are consumer TV boxes rather than enterprise equipment — no immediate vendor attestation action required.

Ad-Fraud on CuraSec