Is Your Android TV Streaming Box Part of a Botnet?
ID: c598fb86-d9d5-591f-a18d-a13e33d49bc3
STIX ID: report--c598fb86-d9d5-591f-a18d-a13e33d49bc3
Feed Name: Krebs on Security
Threat Score
KrebsOnSecurity describes how Superbox Android TV devices sold through major retailers ship with or require unofficial app stores and apps that enlist consumer devices into residential proxy networks and a botnet ecosystem (BADBOX 2.0), enabling advertising fraud, credential stuffing/account takeovers, and other criminal activity; the report cites technical behaviors (DNS hijacking, ARP poisoning, remote access tools), links to proxy providers (Grass, IPidea), and warnings/actions from Google and the FBI.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.