Updated
Updated · Fox News · Aug 14
Bitsight Links 38,000 Android TV Boxes to Ad Fraud Network Worth $47,500 a Day
Updated
Updated · Fox News · Aug 14

Bitsight Links 38,000 Android TV Boxes to Ad Fraud Network Worth $47,500 a Day

1 articles · Updated · Fox News · Aug 14

Summary

  • Bitsight observed 65,957 reports from roughly 38,000 unique device identities tied to hidden software on cheap Android TV boxes, estimating the operation could generate about $47,500 a day in ad-fraud revenue.
  • Researchers said the boxes could spoof Samsung, Vivo, Huawei or Xiaomi phones, visit 144 operator-controlled AI-generated sites and click ads invisibly, while also routing outside traffic through home internet connections as residential proxies.
  • The activity appeared most often on older H96 Max V11 devices, though Bitsight said the evidence does not show every H96 box was affected or pinpoint where in the supply chain the software was added.
  • Bitsight attributed the Fuyao operation to Zhejiang Fengwo IoT Technology using digital certificates, internal files and revenue links; the company did not respond, and no court has ruled on the allegations.
  • Google said the infected products were uncertified Android Open Source Project devices—not official Android TV OS or Play Protect-certified hardware—underscoring the risk of off-brand streaming boxes sold through third-party channels.

Insights

If a factory reset cannot kill the malware hiding inside uncertified Android TVs, what other smart home devices are quietly betraying your network?
Could your bargain streaming box be secretly using your home internet to run a highly profitable cybercrime ring while the TV is off?