Read This Before You Buy That TV Streaming Stick

Bitsight researchers discovered that off-brand H96 Android TV boxes are being used in a large-scale ad-fraud and residential proxy operation run by Fengwo Group: devices phone home to fwgcloud.com, spoof mobile phone profiles to click ads on AI-generated websites using Blockly-delivered JavaScript modules and vision-based ad-recognition, and switch between acting as residential proxies and performing fraud jobs depending on whether the TV is in use; telemetry tracked ~38,000 devices and estimated daily ad revenue near $50,000, highlighting significant privacy, fraud, and network abuse risks from insecure, preinstalled IoT software.