Technology

Why your Android TV box may secretly be a part of a botnet

Published

1 week ago

January 13, 2026

Press Room

Why your Android TV box may secretly be a part of a botnet

NEWYou can now listen to Fox News articles!

Android TV streaming boxes that promise “everything for one price” are everywhere right now.

You’ll see them on big retail sites, in influencer videos, and even recommended by friends who swear they’ve cut the cord for good. And to be fair, they look irresistible on paper, offering thousands of channels for a one-time payment. But security researchers are warning that some of these boxes may come with a hidden cost.

In several cases, devices sold as simple media streamers appear to quietly turn your home internet connection into part of larger networks used for shady online activity. And many buyers have no idea it’s happening.

Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide – free when you join my CYBERGUY.COM newsletter.

WHY JANUARY IS THE BEST TIME TO REMOVE PERSONAL DATA ONLINE

Android TV streaming boxes promising unlimited channels for a one-time fee may quietly turn home internet connections into proxy networks, according to security researchers. (Photo By Paul Chinn/The San Francisco Chronicle via Getty Images)

What’s inside these streaming boxes

According to an investigation by Krebs on Security, media streaming devices don’t behave like ordinary media streamers once they’re connected to your network. Researchers closely examine SuperBox, which is an Android-based streaming box sold through third-party sellers on major retail platforms. On paper, SuperBox markets itself as just hardware. The company claims it doesn’t pre-install pirated apps and insists users are responsible for what they install. That sounds reassuring until you look at how the device actually works.

To unlock the thousands of channels SuperBox advertises, you must first remove Google’s official app ecosystem and replace it with an unofficial app store. That step alone should raise eyebrows. Once those custom apps are installed, the device doesn’t just stream video but also begins routing internet traffic through third-party proxy networks.

What this means is that your home internet connection may be used to relay traffic for other people. That traffic can include ad fraud, credential stuffing attempts and large-scale web scraping.

During testing by Censys, a cyber intelligence company that tracks internet-connected devices, SuperBox models immediately contacted servers tied to Tencent’s QQ messaging service, run by Tencent, as well as a residential proxy service called Grass.

Grass describes itself as an opt-in network that lets you earn rewards by sharing unused internet bandwidth. This suggests that SuperBox devices may be using SDKs or tooling that hijack bandwidth without clear user consent, effectively turning the box into a node inside a proxy network.

Why SuperBox activity resembles botnet behavior

In simple terms, a botnet is a large group of compromised devices that work together to route traffic or perform online tasks without the owners realizing it.

Researchers discovered SuperBox devices contained advanced networking and remote access tools that have no business being on a streaming box. These included utilities like Tcpdump and Netcat, which are commonly used for network monitoring and traffic interception.

The devices performed DNS hijacking and ARP poisoning on local networks, techniques used to redirect traffic and impersonate other devices on the same network. Some models even contained directories labeled “secondstage,” suggesting additional payloads or functionality beyond streaming.

SuperBox is just one brand in a crowded market of no-name Android streaming devices. Many of them promise free content and quick setup, but often come preloaded with malware or require unofficial app stores that expose users to serious risk.

In July 2025, Google filed a lawsuit against operators behind what it called the BADBOX 2.0 botnet, a network of more than ten million compromised Android devices. These devices were used for advertising fraud and proxy services, and many were infected before consumers even bought them.

Around the same time, the Feds warned that compromised streaming and IoT devices were being used to gain unauthorized access to home networks and funnel traffic into criminal proxy services.

We reached out to SuperBox for comment but did not receive a response before our deadline.

8 steps you can take to protect yourself

If you already own one of these streaming boxes or are thinking about buying one, these steps can help reduce your risk significantly.

1) Avoid devices that require unofficial app stores

If a streaming box asks you to remove Google Play or install apps from an unknown marketplace, stop right there. This bypasses Android’s built-in security checks and opens the door to malicious software. Legitimate Android TV devices don’t require this.

2) Use strong antivirus software on your devices

Even if the box itself is compromised, strong antivirus software on your computers and phones can detect suspicious network behavior, malicious connections or follow-on attacks like credential stuffing. Strong antivirus software monitors behavior, not just files, which matters when malware operates quietly in the background. This protection can also alert you to phishing emails and ransomware scams, keeping your personal information and digital assets safe.

Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android and iOS devices at Cyberguy.com.

3) Put streaming devices on a separate or guest network

If your router supports it, isolate smart TVs and streaming boxes from your main network. This prevents a compromised device from seeing your laptops, phones or work systems. It’s one of the simplest ways to limit damage if something goes wrong.

4) Use a password manager

If your internet connection is being abused, stolen credentials often come next. A password manager ensures every account uses a unique password, so one leak doesn’t unlock everything. Many password managers also refuse to autofill on suspicious or fake websites, which can alert you before you make a mistake.

MAKE 2026 YOUR MOST PRIVATE YEAR YET BY REMOVING BROKER DATA

Investigators warn some Android-based streaming boxes route user bandwidth through third-party servers linked to ad fraud and cybercrime. (Photo Illustration by Thomas Fuller/SOPA Images/LightRocket via Getty Images)

Next, see if your email has been exposed in past breaches. Our No. 1 password manager pick includes a built-in breach scanner that checks whether your email address or passwords have appeared in known leaks. If you discover a match, immediately change any reused passwords and secure those accounts with new, unique credentials.

Check out the best expert-reviewed password managers of 2026 at Cyberguy.com.

5) Consider using a VPN for sensitive activity

A VPN won’t magically fix a compromised device, but it can reduce exposure by encrypting your traffic when browsing, banking or working online. This makes it harder for third parties to inspect or misuse your data if your network is being relayed.

For the best VPN software, see my expert review of the best VPNs for browsing the web privately on your Windows, Mac, Android and iOS devices at Cyberguy.com.

6) Watch your internet usage and router activity

Unexpected spikes in bandwidth, slower speeds or strange outbound connections can be warning signs. Many routers show connected devices and traffic patterns.

If you notice suspicious traffic or behavior, unplug the streaming box immediately and perform a factory reset on your router. In some cases, the safest option is to stop using the device altogether.

Also, make sure your router firmware is up to date and that you’ve changed the default admin password. Compromised devices often try to exploit weak router settings to persist on a network.

7) Be wary of “free everything” streaming promises

Unlimited premium channels for a one-time fee usually mean you’re paying in some other way, often with your data, bandwidth or legal exposure. If a deal sounds too good to be true, it usually is.

8) Consider a data removal service

If your internet connection or accounts have been abused, your personal details may already be circulating among data brokers. A data removal service can help opt you out of people-search sites and reduce the amount of personal information criminals can exploit for follow-up scams or identity theft. While it won’t fix a compromised device, it can limit long-term exposure.

10 SIMPLE CYBERSECURITY RESOLUTIONS FOR A SAFER 2026

Cyber experts say certain low-cost streaming devices behave more like botnet nodes than legitimate media players once connected to home networks. (Photo by Alessandro Di Ciommo/NurPhoto via Getty Images)

Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting Cyberguy.com.

Get a free scan to find out if your personal information is already out on the web: Cyberguy.com.

Kurt’s key takeaway

Streaming boxes like SuperBox thrive on frustration. As subscriptions pile up, people look for shortcuts. But when a device promises everything for nothing, it’s worth asking what it’s really doing behind the scenes. Research shows that some of these boxes don’t just stream TV. They quietly turn your home network into a resource for others, sometimes for criminal activity. Cutting the cord shouldn’t mean giving up control of your internet connection. Before plugging in that “too good to be true” box, it’s worth slowing down and looking a little closer.

Would you still use a streaming box if it meant sharing your internet with strangers? Let us know by writing to us at Cyberguy.com.

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

Kurt “CyberGuy” Knutsson is an award-winning tech journalist who has a deep love of technology, gear and gadgets that make life better with his contributions for Fox News & FOX Business beginning mornings on “FOX & Friends.” Got a tech question? Get Kurt’s free CyberGuy Newsletter, share your voice, a story idea or comment at CyberGuy.com.

Related Topics:Android Featured Privacy Security TVs

Click to comment

Technology

Roland’s Go:Mixer Studio turns your phone into a mobile music studio

Published

5 hours ago

January 20, 2026

Press Room

Roland’s Go:Mixer Studio turns your phone into a mobile music studio

Roland now offers a more capable audio mixer for phones and tablets with the launch of the Go:Mixer Studio. The Go:Mixer audio interface lineup has always been a bit limited, better suited for scrappy live streams and capturing quick demos on their phones than professional recording. The Go:Mixer Studio is an attempt to actually reach that lofty goal, with more inputs and outputs, built-in effects, and up to 24-bit / 192kHz audio. There’s even an iOS app that allows you to capture video and multitrack audio simultaneously.

Streaming and social video are still the major use cases here. The Go:Mixer Studio can even be mounted on a mic stand so you can keep it in easy reach during a live session. The screen and knobs allow you to control all the parameters on the Go:Mixer Studio directly, but there’s also a desktop app for Windows and MacOS that gives you complete control of the mixer remotely.

There’s plenty of connectivity, including two XLR inputs on the back with phantom power, a 1/4-inch instrument input for directly connecting a guitar or bass, stereo 1/4-inch line-in jacks, and an aux input. There’s also 1/8-inch TRS MIDI in and out, two headphone jacks, and stereo line outs for connecting to studio monitors. Each audio input has a dedicated EQ and compressor on the channel. The XLR and instrument ins also have reverb available.

The Go:Mixer Studio is available now for $299.

Technology

Alexa.com brings Alexa+ to your browser

Published

5 hours ago

January 20, 2026

Press Room

NEWYou can now listen to Fox News articles!

For years, Alexa mostly stayed in one place. It lived on kitchen counters, nightstands or living room shelves. That setup worked for music and timers, but it also limited when and how people could actually use the assistant. Now that is changing.

Amazon has rolled out Alexa.com, which brings Alexa+ directly to your web browser for Early Access users. Instead of relying on a speaker or phone, you can now open a laptop and start using Alexa like any other web-based AI tool.

This shift is less about new tricks and more about access. Alexa can now follow you throughout your day instead of waiting for you at home.

CHATGPT HEALTH PROMISES PRIVACY FOR HEALTH CONVERSATIONS

Amazon’s Alexa is no longer tied to a smart speaker, with Alexa.com bringing the assistant and Alexa+ directly to the web browser for Early Access users. (Photo Illustration by Thomas Fuller/SOPA Images/LightRocket via Getty Images)

What Alexa.com actually is

Alexa.com is the browser-based version of Alexa+. You can type questions, explore topics, plan trips, organize tasks, or create content without touching a smart speaker. The biggest difference is continuity. Alexa keeps context across devices, so conversations carry over whether you are on your laptop, phone, Echo, or Fire TV. You do not have to repeat yourself every time you switch screens. That makes Alexa feel less like a command tool and more like an assistant that remembers what you are working on.

Who can use Alexa.com right now

Alexa.com is not open to everyone yet. To use it, you need:

Alexa+ Early Access
An Amazon account linked to a compatible Echo, Fire TV, or Fire tablet
A US-based Amazon account
Device language set to English, United States

Child profiles are not supported on the browser version. Older Echo devices will continue using the original Alexa.

What Alexa.com cannot do yet

Because Alexa.com is still in Early Access, it has limits that matter for everyday users. Right now:

You can only type to Alexa in your browser
Voice interaction is not supported on the web
Music playback is not available
Smart home controls are limited compared to Echo devices

Amazon says features will roll out gradually. Alexa.com is meant to complement your devices, not fully replace them yet.

Meal planning without juggling tabs

One area where Alexa.com feels genuinely useful is meal planning. You can ask Alexa for a full week of meals and set preferences like high protein, low sugar, or kid-friendly lunches. Alexa generates a plan and turns it into a shopping list. From there, items can be added directly to Amazon Fresh or Whole Foods. Instead of bouncing between recipes, notes and carts, everything happens in one place.

Organizing everyday life in one place

Alexa.com also works as a lightweight life organizer. You can upload documents, emails and images so Alexa can pull out key details. That includes appointments, reminders and schedules you would otherwise forget. Instead of searching your inbox, you can ask Alexa when the dog last went to the vet or what time practice starts tonight. The information stays available across devices.

Smart home access, with limits

Alexa.com keeps your smart home controls visible next to your chat window. While full smart home control is still limited in the browser, Alexa.com lets you check status, review activity and continue actions on your Echo or Fire TV devices. It is most useful as a bridge. You can start something in the browser and finish it at home without starting over.

Recipes that follow you into the kitchen

Alexa.com also simplifies cooking. If you find a recipe online, you can paste the link into Alexa and ask it to adjust for dietary needs. Alexa can save it, convert it into ingredients and add everything to your shopping list. When it is time to cook, Alexa can pull the recipe up on your Echo Show, guide you step by step and manage timers so your hands stay free.

5 TECH TERMS THAT SHAPE YOUR ONLINE PRIVACY

Alexa.com lets users type questions, plan trips, organize tasks and create content without relying on an Echo or smartphone. (Michael Nagle/Bloomberg via Getty Images)

Finding something to watch faster

Decision fatigue hits hard at night. On Alexa.com, you can explore movie themes, get recommendations and save picks for later. When you sit down, Alexa remembers your choices and sends them to your Fire TV. That cuts down on scrolling and family debates.

What about privacy

Using Alexa on the web raises natural privacy questions. Amazon says Alexa+ includes built-in protections and user controls. Still, it is worth taking a minute to review your settings, especially if you plan to upload documents or personal information. A few smart habits can help:

Check your Alexa privacy settings and review stored activity
Avoid uploading sensitive documents like IDs or medical records
Use strong antivirus software to protect your device. The best way to safeguard yourself from malicious links that install malware, potentially accessing your private information, is to have strong antivirus software installed on all your devices. This protection can also alert you to phishing emails and ransomware scams, keeping your personal information and digital assets safe. Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android and iOS devices at Cyberguy.com.

As with any AI assistant, convenience comes with trade-offs. Staying aware helps you stay in control.

How much Alexa+ will cost

Alexa+ is free during Early Access. When Early Access ends, you will not be automatically charged. After that:

Alexa+ stays free with a Prime membership
Non-Prime users can subscribe for $19.99 per month

This makes Alexa.com more appealing for Prime members and a tougher sell for everyone else.

What this means to you

For most people, Alexa.com is about convenience. If you already use Alexa at home, the web version makes it easier to use during the day. You can plan, organize or look things up from your computer and then pick up later on your phone or Echo. It also puts Alexa in the same category as other browser-based AI tools, but with deeper ties to shopping, smart home features and entertainment. Whether you stick with it will likely come down to how often you want Alexa to help you during your day.

Take my quiz: How safe is your online security?

Think your devices and data are truly protected? Take this quick quiz to see where your digital habits stand. From passwords to Wi-Fi settings, you’ll get a personalized breakdown of what you’re doing right and what needs improvement. Take my Quiz here: Cyberguy.com.

YOU CAN FINALLY CHANGE YOUR GMAIL ADDRESS WITHOUT LOSING DATA

Amazon says Alexa.com allows conversations to carry over across devices, giving users continuity between laptops, phones and smart home screens. (Photographer: Michael Nagle/Bloomberg via Getty Images)

Kurt’s key takeaways

Alexa.com does not reinvent Alexa. It simply makes it easier to use where people already spend time. By bringing Alexa+ to the browser, Amazon is betting that continuity matters more than novelty. For some users, that will be enough to make Alexa feel relevant again.

If Alexa followed you from your laptop to your living room, would you actually rely on it more, or would it still feel optional? Let us know by writing to us at Cyberguy.com.

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

Technology

A second US Sphere could come to Maryland

Published

17 hours ago

January 19, 2026

Press Room

A second US Sphere could come to Maryland

The second US sphere would be built in an area known as National Harbor in Prince George’s County, Maryland. Located along the Potomac River, National Harbor currently features a convention center, multiple hotels, restaurants, and shops. While Abu Dhabi plans to build a sphere as large as the one in Las Vegas, the National Harbor venue would be one of the first mini-Sphere venues announced last March.

Its capacity would be limited to 6,000 seats instead of over 17,000. But the smaller Sphere would still be hard to miss with an exterior LED exosphere for showcasing the “artistic and branded content” that helped make the original sphere a unique part of the Las Vegas skyline.

The inside of the mini-Sphere will feature a high-resolution 16,000 by 16,000 pixel wrap-around screen, the company’s immersive sound technology, haptic seating, and “4D environmental effects.” For the AI-enhanced version of The Wizard of Oz currently playing in Las Vegas, audiences experience effects like wind, fog, smells, and apples falling from the ceiling.

The mini-Sphere will potentially also be cheaper to build than the $2.3 billion original, but its construction is contingent on the “receipt of certain governmental incentives and approvals from Prince George’s County and the State of Maryland.” Sphere Entertainment says the project “would utilize a combination of public and private funding, including approximately $200 million in state, local, and private incentives,” but would potentially generate millions of dollars in revenue for the country and state while supporting over 4,700 jobs once it opens.