GoKawiilGoogle cuts ties with MECOOL maker Videostrong over Android TV botnet
Google says it has severed its relationship with Videostrong Technology, the OEM/ODM behind MECOOL Android TV boxes, after finding the company built a backdoor called XCPE into its devices. Google says the backdoor turned over 1.3 million TV boxes into a botnet, which Videostrong allegedly sold access to for ad fraud, data exfiltration and enrolling devices into residential proxy networks.
GoKawiil's interpretation of the reporting above, not reported fact.
The case suggests that device-level supply chain compromises can scale malware distribution far beyond typical app-store attacks, since the backdoor was reportedly built in at the manufacturer level. Google's move to tighten its device review program indicates the company sees gaps in how it vets hardware partners before devices reach consumers, which could affect trust in budget Android TV hardware broadly.
- Google says it severed ties with Videostrong, maker of MECOOL Android TV boxes, over an alleged backdoor.
- The XCPE backdoor reportedly compromised over 1.3 million devices into a botnet used for ad fraud and data theft.
- Google says it has updated its device review program to close gaps exposed by this incident.
Google Chromecast with Google TV (HD) — If this malware scandal has you wary of off-brand Android TV boxes, switching to an official Google-backed streaming device is a smart move. Chromecast with Google TV comes from a trusted source with regular security updates, unlike budget boxes with murky supply chains. It's a simple, reliable way to get smart TV features without worrying about hidden backdoors.
See Google Chromecast with Google TV (HD) on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: androidauthority.com, 2026-11-03
Published there as: “A major Android TV box maker just got busted by Google for running a malware racket”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.