Android-Based TV Boxes Preloaded With Malware

[engine]

Security researchers have discovered a range of Android-based TV boxes have been customised to ship with malware that communicates with a command and control center, and fully capable of launching attacks.

Milisic and Budington note that there’s no easy way to remove the malware for the average user. Throwing out the box altogether might be the best option for affected users.

“I think the only way to mitigate this problem is to hold retailers to a higher standard,” Milisic told TechCrunch. Referring to online sellers like Amazon, “they’re not allowed to sell children’s toys made out of spinning razor blades, why is it OK to let small, unknown vendors sell computers acting maliciously without owners’ knowledge and permission?”

[techcrunch.com...]

[blend27]

--- stealing data (if any) from the device or the network it’s connected to----

It is always a good thing to have a OUTER ISP Box(router + WiFi ) >> hardware firewall >> internal access point setup. This way TVs and "Other" internet Devices use OUTER network and things you Trust are on the inside.

I had one or 2 of those Android-based TV boxes but only on the OUTER router when KODI was a thing. Never Trusted that hardware or software it was loaded with.

Now replaced with an older, stripped down OS version of Galaxy A Tablet(Screen Mirroring) with a power-bank duck-tapped to it for longer usage. Still only on the OUTER router. Sub-netting helps too.

[Key_Master]

I have to believe there is a good open source firmware out there to write over the stock firmware. Anybody have any recommendations?

[engine]

Trusting that firmware is also something.