Looks like I should stop using my Mecool KM2 Plus Deluxe

[tollgate 10]

https://cloud.google.com/blog/topics/threat-intelligence/shutting-the-door-on-the-xcpe-botnet

and from chatgpt:

There is now a serious security concern surrounding MECOOL TV boxes, and I would recommend treating your MECOOL KM2 PLUS Deluxe as potentially compromised until its status is established.

This is not simply a case of an Android box having an outdated security patch.

On 3 November 2026, Google revealed that it had dismantled a massive malware operation involving more than 1.3 million Android TV devices, many manufactured by Videostrong Technology, the company behind MECOOL.

The investigation found that the manufacturer had deliberately installed a backdoor in devices, allowing remote operators to:

• Install malware without the owner's knowledge.

• Use the owner's internet connection as a residential proxy.

• Commit advertising fraud.

• Collect device and account information.

• Capture screenshots and execute remote commands.

• Access other devices on the local network.

Google has since severed its relationship with Videostrong and banned it from supplying certified Android devices.

 

Your exact model is on the warning list

I've checked the actual research data published by security researchers at Synthient.

Model identified

KM2PLUSDELUXE

The MECOOL KM2 PLUS Deluxe appears explicitly in their list of 182 device model names observed in the campaign.

 

GitHub

This is particularly concerning because the researchers found the backdoor embedded in firmware, with system-level privileges.

However, an important distinction: being on the list does not prove that your individual box is infected.

What I recommend

• Disconnect the MECOOL from your network immediately (Wi-Fi and Ethernet).

• Don't rely on a factory reset. The backdoor can survive resets.

• Don't enter any more Google, streaming or other account credentials on it.

• I would seriously consider replacing it rather than continuing to use it.

 

Edited 1 hour ago by tollgate