Read This Before You Buy That TV Streaming Stick
Security experts have been sounding the alarm for years about the risks of using generic TV boxes that promise unlimited content streaming for a one-time fee, warning that they secretly rent the user's Internet connection out to strangers. But a groundbreaking new analysis finds these devices also routinely spoof themselves as mobile phones clicking ads on AI-generated websites as part of…
Security analysts have long cautioned against the use of generic TV streaming boxes, claiming they secretly lease users' internet connections to third parties. A recent investigation, however, has uncovered a more sinister scheme involving these devices. Pedro Falé, a threat researcher at Bitsight, was able to delve into a complex ad fraud network by registering an expired domain used to coordinate fake ad clicks on H96 TV streaming devices.
Upon analysis, he discovered that these devices were routinely impersonating mobile phones to click on ads on AI-generated websites, as part of a vast operation aimed at defrauding online merchants and advertising networks. The Fengwo Group, a Chinese entity, has been identified as the mastermind behind this operation, operating a portfolio of ad-publishing companies.
The Fengwo Group's domain, fwgcloud.com, claims to be redefining human-AI interaction, while its website hosts machine-generated news articles across various categories. The group's apps, installed on H96 devices, help coordinate the ad fraud network, relying on AI-generated content to make the fraud more convincing. These devices are either used as residential proxies while a TV is in use or engage in ad fraud when the TV is off, allowing the ad fraud tasks to be carried out without interfering with the device's primary function of streaming video content.
Written by urgent.news from KrebsOnSecurity's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
