Think twice before installing this device promising free movies

Researchers found that SuperBox devices expose an open ADB port and ship with root-accessible components that allow attackers to silently install APKs (bypassing signature checks, unknown-sources restrictions, permission prompts, and Play Protect). Proxy/residential exit networks (e.g., Popanet) can be abused via loopback addresses (0.0.0.0 or 127.0.0.1) to reach local ADB, and a honeypot experiment recorded 1,352 distinct ADB access attempts over three weeks, indicating active exploitation leading to further infections, residential proxy abuse, and IoT botnet formation.