| Read this before you buy that TV streaming stick(krebsonsecurity.com) | |
| 793 points by speckx 45 days ago | 527 comments | |
tl;dr: Bitsight researchers found that cheap generic Android TV streaming boxes (like the popular H96) not only rent out users' internet connections as residential proxies, but also spoof themselves as Samsung, Xiaomi, and other mobile phones to click ads on AI-generated websites run by China's Fengwo Group, netting an estimated $50,000/day from ~38,000 devices. The boxes switch modes based on HDMI signal: proxy when the TV is on, ad fraud when it's off. Experts recommend sticking to Play Protect-certified devices from reputable brands. | |
HN Discussion:
| |