Generic TV streaming boxes marketed as unlimited content devices are secretly exploiting users' internet connections and impersonating mobile phones to commit fraud, according to new security research.
A groundbreaking analysis reveals that budget streaming sticks sold online with promises of unlimited content for a one-time fee engage in multiple malicious activities beyond previously known risks.
These devices rent users' internet bandwidth to third parties without consent. More troublingly, they spoof themselves as mobile phones to click ads on AI-generated websites—a scheme designed to defraud online merchants and advertising networks through fake engagement.
Security experts have warned about these devices for years, but this research documents a more sophisticated operation than initially understood. The sticks operate as botnets, leveraging compromised home networks for coordinated fraud campaigns.
Consumers considering budget streaming alternatives should purchase devices from established manufacturers like Roku, Amazon, or Apple instead. Official streaming apps and services, while subscription-based, protect both your network security and privacy.
Source: [Krebs on Security](https://krebsonsecurity.com/2026/07/read-this-before-you-buy-that-tv-streaming-stick/)
The U.S. Cybersecurity and Infrastructure Security Agency has issued an urgent directive requiring federal agencies to mitigate actively exploited vulnerabilities in IBM Langflow, N-central, and Apache Tomcat within three days.
The Department of Homeland Security is attempting to obtain Signal group chat messages from plaintiffs in a free-speech lawsuit against the agency. The move has raised concerns about using legal discovery to surveil encrypted communications.
Maksim Silnikau, creator of the Ransom Cartel ransomware operation, received a 16-year prison sentence for orchestrating attacks against at least 18 companies worldwide.
Atlassian's Rovo AI assistant can exfiltrate sensitive data despite organizational security controls. The vulnerability allows the tool to extract and transmit protected information beyond intended boundaries.