Free streaming boxes may be routing criminal traffic through your home


“Free” movies and TV could cost you your privacy, bandwidth, and control of your home network.

We’ve warned about illegal streaming and modded Amazon Fire TV Sticks in the past. Now, researchers have found that certain SuperBox devices and apps could quietly enroll a household connection into a proxy network, allowing third parties to route traffic through it.

An earlier report identified CyberFlix TV, available through SuperBox’s custom app store, as containing Popanet proxy functionality that registers the device with a server controlled by the proxy operator.

Law enforcement agencies have warned that “foreign entities” are using residential proxies to conceal their identities and make their activity appear to come from someone else’s home network.

Read more…
Source:  Malware Bytes Labs


Sign up for the Cyber Security Review Newsletter
The latest cyber security news and insights delivered right to your inbox


Related:

  • North Korean hackers blamed for stealing record $6.3B in Binance breach

    October 30, 2026

    Hackers working for the North Korean regime have been blamed for a record cryptocurrency heist following a cyberattack at crypto exchange Binance. The hackers stole at least $6.3 billion in crypto from the company’s wallets, though about half of that amount was frozen as the stolen crypto traveled across various blockchains, according to security researchers. The ...

  • AI used in Aur0ra ransomware testing and execution

    October 29, 2026

    In May 2026, Counter Threat Unit™ (CTU) researchers published a report on an AI-orchestrated post-exploitation framework that tested the capabilities of multiple vendors’ endpoint detection and response (EDR) solutions, including the Sophos agent. Following a testing phase, Sophos analysts observed the same infrastructure hosting Cobalt Strike in support of Aur0ra ransomware (also known as Aurora ...

  • Kaspersky GReAT uncovers attack targeting government-only Windows system in Asia

    October 29, 2026

    Kaspersky’s Global Research and Analysis Team (GReAT) has uncovered an attack targeting a customized version of Windows 10 used exclusively by government organizations in an Asian country. The attackers used legitimate software components to launch NetamLoader, a previously unknown malware framework that can receive and run additional code while concealing its activity. The team presented ...

  • Hackers are breaking into company networks via hacked CCTV camera software

    October 29, 2026

    Attackers abused camera management software to gain initial access and establish persistence on networks. Campaign used DLL sideloading and reverse shells to evade detection and maintain control. Researchers urge treating camera systems as security-sensitive assets and monitoring them for abnormal activity. Read more… Source:   Sign up for the Cyber Security Review Newsletter The latest cyber security news and insights delivered ...

  • Hacker stole personnel data about thousands of Homeland Security employees, including CBP and ICE agents

    October 28, 2026

    Personally identifiable information belonging to thousands of U.S. Department of Homeland Security employees has been published online after a hacker stole reams of data in a previously undisclosed breach at the government department earlier this year. The breach includes names, job titles, and work contact information, such as email addresses, cell phone numbers, and office locations, ...

  • A security flaw in these widely used barcode scanners could open up warehouses and stores to cyberattack

    October 28, 2026

    Researchers find Bluetooth flaws in warehouse barcode scanners that could provide a foothold into enterprise networks. Attackers could spoof scanner input, inject keystrokes, and potentially pivot to ransomware or data theft. Kaspersky urges stronger device authentication, network segmentation, and stricter security controls for warehouse infrastructure. Read more… Source:  TechRadar News Sign up for the Cyber Security Review Newsletter The latest cyber ...