Beware of These Android TV Boxes Infected with Malware
In contrast to perusing a tangible storefront, engaging in online exploration for electronic devices on platforms such as Amazon can introduce you to more economical alternatives from lesser-known manufacturers. This generally proves advantageous, as it allows you to acquire the desired device without unnecessary clutter, all at a reduced price. However, as is often the case with favorable circumstances, there exist unscrupulous individuals who take advantage of them.
A recent instance of this has emerged in the sale of off-brand Android TV streaming players. Due to the open-source nature of Android devices, including those employing the Android TV operating system, practically any manufacturer can develop their own Android TV. Regrettably, numerous widely favored models of Android TV, conveniently accessible on Amazon, have exploited this opportunity to clandestinely introduce malware into consumers’ homes. These unscrupulous actors utilize these devices as a conduit to pilfer data, perpetrate digital crimes, and expose unsuspecting individuals to the dark underbelly of the internet.
According to a recent report from TechCrunch, pernicious malware has been discovered wreaking havoc on two prominent off-brand Android TV boxes available for purchase on Amazon. The brands in question are AllWinner and RockChip, and the specific devices affected include the AllWinner T95, AllWinner T95Max, RockChip X12-Plus, and RockChip X88-Pro-10. At first glance, these devices may seem enticing, as they are priced lower than their major brand counterparts and allegedly offer extensive customization options. However, all of this is merely a smokescreen.
Cybersecurity experts have determined that the firmware installed on these Android TV boxes is infected with two distinct types of malware. Firstly, a clickbot that navigates through webpages from the darkest recesses of the internet, automatically clicking on advertisements to generate revenue, while further proliferating malware from these ads. Secondly, a botnet network connection links the device to a malicious network, enabling activities such as cryptocurrency mining, orchestrating DDoS attacks, and, naturally, harvesting user data. The exact scope of this botnet network connection has yet to be ascertained, but estimates suggest it comprises anywhere from a few hundred to several thousand compromised devices.
What course of action should you take?
If you have purchased and utilized one of these devices, there is a distinct possibility that you have been exposed to the malware. While it is theoretically feasible to manually eradicate the malware from the device and sever its connection to the botnet network, doing so correctly would necessitate a thorough search through files. Consequently, the optimal solution is to simply disconnect the device and, if you are past the return window, dispose of it. Additionally, if you have logged into any applications or services using the infected box, it is imperative that you immediately change your passwords and remain vigilant for any suspicious login attempts.
Regrettably, not only are these affected boxes still available for purchase on Amazon, but the majority of them also boast relatively high user ratings, consistently propelling them toward the top of search results. Short of advocating for more stringent retail standards, the only effective measure you can take to safeguard yourself is to conduct additional research on any new devices prior to making a purchase. Engage in searches beyond Amazon reviews, particularly on user-driven platforms like Reddit, to ascertain if any disconcerting reports have emerged regarding a specific device before fully committing to it. While it may entail a higher cost, it may be in your best interest to adhere to major brands for Android TV devices, such as Chromecast or NVIDIA Shield TV.
Read More:Google’s AI Magic Compose Beta: Empowering Personalized Textual Interactions
