MECOOL Android TV Box Malware: Google Cuts Ties [Confirmed]

Google has officially severed all business and commercial partnership ties with MECOOL following explosive, verified investigative reports from Android Authority which uncovered that its popular budget Android TV boxes secretly installed a sophisticated malware backdoor. The XCPE botnet operation compromised over 1.3 million consumer devices, transforming home entertainment hardware into malicious nodes used for widespread ad fraud and sensitive data exfiltration. Industry security partners collaborated with Google to dismantle the infrastructure, prompting immediate overhauls to device review programs. As hardware security vulnerabilities cascade into broader entertainment ecosystems, similar to hardware sunset trends like [Meta Quest 2 Support Ending: Meta Sets 2027 Sunset [Confirmed]](/news/meta-quest-2-support-ending-2027), consumers and gamers must audit connected peripherals. This breach highlights extreme vulnerabilities in unregulated hardware supply chains, threatening everything from casual streaming to secure competitive gaming credentials. Google confirmed that patches and review process updates have been deployed to plug existing compliance gaps, though analysts warn that affected users remain at risk unless hardware is completely replaced or flashed with verified firmware. Security experts urge all owners of budget streaming devices to monitor network activity and safeguard their accounts immediately.