TV boxes used for free streaming pose cybersecurity risks

Cybersecurity researchers have issued a warning regarding certain TV boxes used to access free streaming content, such as movies and football matches. An analysis presented at the Ekoparty 22 conference in Buenos Aires revealed that some of these devices may come with pre-installed malicious software.

Chilean researchers Anthony De La Paz and Patricio Moraga Abarca demonstrated that a studied device was equipped with a system designed to receive instructions from a malicious command and control (C2) server. This connection allows attackers to potentially use a user's home network for third-party services and expose sensitive information, including passwords and credit card data. The researchers noted that even performing a factory reset did not remove the code used to maintain control over the device.