From streaming boxes and TV sticks to digital picture frames and projectors, more devices than ever are connecting to our home networks. While many are perfectly safe, the FBI is warning consumers that some internet-connected devices may arrive already compromised and can be used by cybercriminals without the owner’s knowledge. 

Do You Have Any of These Devices?

The FBI has identified several categories of devices that have been associated with the BADBOX 2.0 botnet, including: 

  • “Unlocked” streaming boxes or TV sticks that promise free access to premium channels, sports, movies, or other paid content
  • Generic Android streaming devices from unfamiliar brands
  • Digital picture frames
  • Digital projectors
  • Aftermarket vehicle infotainment systems
  • Other internet-connected smart devices from unknown manufacturers

If you think you may own one of these devices, please keep reading. 

The first item on this list is particularly common. These “cracked,” “jailbroken,” or “free TV” streaming devices have become increasingly popular in recent years. They are sold online through major marketplaces, social media, flea markets and sometimes even local storefronts.

Many consumers don’t realize these devices typically provide access to copyrighted content without authorization, making them illegal to use. Even more concerning, according to the FBI, some devices may be compromised before they ever reach a consumer’s home or may become infected during setup through malicious software downloads

What Is BADBOX 2.0?

A botnet is a collection of internet-connected devices that have been infected with malicious software and can be controlled remotely by cybercriminals.

The FBI reports that BADBOX 2.0 has been found in devices such as:

  • TV streaming devices
  • Digital picture frames
  • Digital projectors
  • Aftermarket vehicle infotainment systems
  • Other Internet of Things (IoT) devices

Many of the devices identified by investigators were manufactured overseas and may have been configured with malicious software before reaching the consumer. In other cases, devices became infected after users downloaded software from unofficial app marketplaces.

Why Does This Matter?

One of the most concerning aspects of BADBOX 2.0 is that it can turn a device into part of a residential proxy network.

In simple terms, cybercriminals can use your internet connection to help hide their online activities. Instead of their traffic appearing to come from them, it appears to come from an ordinary home internet connection.

According to the FBI, these compromised devices can become part of residential proxy services that are used to support criminal activity online.

This means a device sitting quietly in your living room could be generating internet traffic without your knowledge.

How to Protect Yourself

The good news is there are steps you can take to reduce your risk:

Buy from trusted manufacturers

Choose devices from well-known companies that regularly provide security updates and support.

Avoid “free everything” devices

Be cautious of streaming boxes that promise unlimited free movies, sports, or premium content. If an offer seems too good to be true, it often is.

Use official app stores

Download apps only from trusted sources such as Google Play and avoid unofficial marketplaces.

Keep software updated

Install firmware and security updates when available. Updates often contain important security fixes.

Monitor your Home network

If you notice unusual internet activity, new devices appearing on your network, or performance issues that cannot be explained, it may be worth investigating further.

Disconnect suspicious devices

If you suspect a device may be compromised, disconnect it from your network and consult the manufacturer’s support resources.

Staying Safe Starts with Awareness

Cyber threats continue to evolve, and increasingly they target everyday devices many people would never suspect. The FBI’s recent warnings serve as an important reminder that cybersecurity is not just about computers and smartphones anymore. Every connected device in your home can play a role in protecting your personal information and your internet connection.

At PVT, we’re committed to helping our communities stay informed about emerging online threats. A little awareness today can help prevent a much bigger problem tomorrow.

Learn More

For additional information and recommendations, review the FBI alerts:

Sources: Federal Bureau of Investigation (FBI) Cyber Division public alerts regarding BADBOX 2.0 and residential proxy networks.