Cheap Android TV Boxes Preloaded with Malware Pose as Smartphones in Fraud Campaign

Security firm BitSight identified a campaign called 'Fuyao' involving cheap Android TV boxes preloaded with malicious apps that alter device hardware identities to impersonate Samsung, Huawei, Xiaomi, or Vivo smartphones. The operation is attributed to Zhejiang Fengwo IoT Technology Co., Ltd., a Chinese company founded in 2019. These apps generate fraudulent ad clicks on websites operated by the same threat actors while also repurposing infected devices into proxies. No specific CVE IDs, technical indicators, or exact infection numbers were disclosed in the reported findings. The primary impact includes unauthorized use of victims' broadband connections and potential exposure to further malicious activity.