Read This Before You Buy That TV Streaming Stick
3 hours ago
- Security experts warn that generic TV boxes with unlimited streaming often secretly rent users' internet connections as proxies.
- These devices spoof themselves as mobile phones to click ads on AI-generated websites in a large ad fraud operation.
- Researcher Pedro Falé analyzed H96 streaming sticks by registering an expired domain used for telemetry.
- The devices had pre-installed apps from Zhejiang Fengwo IoT Technology Ltd, which operates under the Fengwo Group.
- Fengwo uses Google's Blockly visual programming language to let low-skilled operators build fraudulent websites and manage ad click routines.
- When the TV is on, the box acts as a residential proxy; when off, it switches to ad fraud activities.
- Generic TV boxes are insecure, lack authentication, and are sold by major retailers despite warnings from the FBI.
- Bitsight estimates the ad fraud network generates about $50,000 per day from approximately 38,000 compromised devices.
- Users are advised to use name-brand streaming devices and be cautious about installed apps to avoid proxy and fraud risks.