🦠 Google Shuts Down Android TV Malware Network – MECOOL Users Beware!

TROYPOINT.com Posts
1

See Full Content of Post Here: Google Shuts Down Android TV Malware Network – MECOOL Users Beware!

For years, TROYPOINT has tested, reviewed, and recommended various Android TV boxes to help you get the most out of your home entertainment setup. In the past, we have highlighted devices from MECOOL (such as the KM9PRO and KM7 Plus) as capable, budget-friendly streaming options. Unfortunately, we have a major security update to share regarding…

2

As always Troy, the insiders applaud your dedication to helping keep us safe and by providing timely info when our safety and security is at risk. Thank you for not only providing alternatives and methods for advanced users but caring so much for your insider fans. Cudos for you.

3

Thanks @Miki unfortunately this is a hard one to swallow as TROYPOINT has been a strong supporter of MECOOL over the years. They have been in the Android TV Box market for a very long time and had an excellent reputation. My question is whether they knew the manufacturer was injecting this malware onto the units?

4

I agree Troy but it just goes to confirm that most of us are entirely unaware of what is truly using our bandwidth. I doubt that even my dedicated use of a VPN would help in this case but I am not techy enough to know for sure. I think it’s also good to understand that even advanced users like yourself can never truly know everything, and I know the effort you go to. Another lesson in the bank.

5

You are exactly right. VPN will not help situations like this where the firmware is compromised.

6

I have a KM6 deluxe that I purchased from Mecool in 2021. Would this be affected?

7

As simple users of these devices, we wouldn’t have a scanning tool to ever identify and/or verify this malware, right? The standard scanners would only scan the storage files, not the firmware I would assume?

8

It’s in the article.

The answer is extremely concerning: you must assume ALL MECOOL Android TV boxes—both certified and AOSP—are compromised.

9

Correct. If you read the article Google’s security team even missed the backdoor.

11

What about the Onn boxes? Are they safe? If not what can you do? thanks

12

What Android TV Brands Are Actually Safe?

With MECOOL and dozens of generic brands compromised by the Videostrong takedown, you are likely wondering what devices are actually safe to connect to your home network. Fortunately, there are several premium manufacturers that utilize entirely separate, secure supply chains and dedicated firmware development teams.

If you are looking to replace your compromised MECOOL box, these brands are safe, highly recommended alternatives that we routinely test and recommend here at TROYPOINT:

  • BuzzTV: A fantastic alternative that offers both fully certified Google TV devices (like the newer G-Series running Android 14) and powerful, clean AOSP devices (like the Classic AI). They use trusted manufacturing partners and dedicated software teams completely separate from the malware scandal.
  • Formuler: Formuler builds premium, enthusiast-grade hardware (such as the Z12 Ultra) centered around their proprietary MYTVOnline software. They manage their own secure ecosystem and have zero ties to the cheap, mass-produced generic box market.
  • Ugoos: For advanced users who prefer pure AOSP, Ugoos (like the AM9 Pro) remains a top-tier choice. Unlike fly-by-night brands, Ugoos is its own manufacturer with a stellar reputation for providing clean, highly optimized firmware with frequent, legitimate security updates.
  • Mainstream Certified Devices: Devices built by major tech companies or Tier-1 ODMs—such as the Walmart Onn 4K Pro, NVIDIA Shield TV Pro, Google TV Streamer — are always safe bets, as they undergo rigorous, uncompromised security auditing.
13

Thanks!