Free streaming boxes may be routing criminal traffic through your home
Researchers found SuperBox streaming boxes and the CyberFlix TV app enroll home connections into the Popanet residential proxy network, routing criminal traffic.
Researchers found that SuperBox devices and the CyberFlix TV app, distributed through SuperBox's custom app store, contain Popanet proxy functionality that registers the device with servers controlled by the proxy operator, enrolling household connections into residential proxy networks. The reported configuration weakens Android safeguards with exposed ADB access, root-level privileges without authentication, and removal of app-install protections. Plume's research warns these proxy networks can also function as malware-delivery platforms, and the FBI notes foreign entities use residential proxies to conceal activity such as credential stuffing and account abuse. Malwarebytes advises disconnecting and replacing affected SuperBox/CyberFlix devices rather than factory-resetting them.
- CyberFlix TV in SuperBox's custom app store registers devices with Popanet-controlled proxy servers.
- SuperBox configuration exposes ADB access, grants root without authentication, and removes Android app-install safeguards.
- Residential proxy enrollment makes home IPs appear to originate criminal activity like credential stuffing.
- Plume warns proxy channels can double as malware-delivery platforms targeting the devices themselves.
- Advice: disconnect SuperBox/CyberFlix devices, replace rather than factory reset, and segment IoT networks.
- Vendors
- SuperBoxMalwarebytesPlume
- Products
- CyberFlix TVPopanet
- Malware
- Popanet
- Victims
- home users
- Organizations
- MalwarebytesPlumeFBI
From the original article
3 min read at malwarebytes.com
Researchers found that apps available on SuperBox devices could add your household connection to a residential proxy network.
By @MetallicaMVP · malwarebytes.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.