Even after publishing they never contacted us. I was contacting the security companies one by one asking them to unlock us. Most never respond in any fashion, but one finally did respond and told us he was blocking us because of the Koi report and he gave us the url. [...] If people on the internet are blocked from reaching your company, then that's a death sentence. Plus all the LLMs now say we're working with Chinese cyber criminals. How will that ever get removed? [...] They admit to using AI for their analysis. Maybe a human made it all up? Maybe it was AI? [...]
Image from The Register
Every other fabrication on this page was caught by a court or a reader. This one was acted on by machines. On 30 December 2025 Koi Security published a threat report naming MeetingTV's Zoomcorder as a public-facing front for a Chinese criminal operation it called DarkSpectre, linked through a browser extension that, MeetingTV says, does not exist. Security vendors ingested the report and blocked the company's domains as malware, which is how Michael Robertson, its founder, found out. Koi later added a line saying there is no evidence the domain is connected to the threat actor, and Palo Alto Networks bought Koi in April 2026; the blocks stayed. MeetingTV sued Koi on 18 March 2026 and added Palo Alto Networks in an amended complaint, alleging the attribution came out of Koi's AI analysis platform unsupervised. Palo Alto Networks stands by the research. Pending.
Michael Robertson, MeetingTV, in The Register