7 reportsPriority Low
Google botnet takedown and Chrome updates
Google has taken down a large botnet and released multiple Chrome updates addressing security vulnerabilities, impacting organisations using its software.
First report Latest
What is going on
- Google reported dismantling a large botnet embedded in Android TV boxes, affecting a range of Android-based IoT devices.
- Google has cut ties with the company behind the botnet campaign.
- Multiple Chrome updates were released, including version 157 for iOS, Android, and desktop with security fixes.
- A vulnerability in Chrome prior to 157.0.8103.38 allowed remote code execution and was addressed in the update.
- A phishing campaign used Google Calendar invites to hijack corporate sessions and bypass MFA protections.
- What to watch: Further details on the botnet's origin and the extent of the phishing campaign's impact.
Reports in this story
Newest first. Each one is a separate event with its own sources and evidence.
- Priority LowType Research & news
Chrome 157 Rolls Out With 213 Security Fixes, Seven Rated Critical
- Priority LowType Research & news
Cybersecurity: Google Takes Down Global Android Botnet
- Priority LowType Incident
Hackers use n-day exploits in zero-click attacks on iOS, Android devices
- Priority LowType Vulnerability
Chrome for Android Update
- Priority LowType Vulnerability
Use after free in Prerender in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page
- Priority LowType Research & news
Google dismantles massive botnet hidden in Android TV boxes
- Priority LowType Research & news
Google dismantles botnet secretly running on 1.3 million Android TV boxes

