Techlicious Pre-Installed Malware in Smart Devices Poses Serious Cybersecurity Risks
Article Content
- •Low-cost smart devices from Amazon and Walmart are arriving with pre-installed malware.
- •The FBI estimates 20 million U.S. homes have at least one infected device.
- •Consumers can identify risks by checking for specific signs in product listings.
A Wall Street Journal investigation revealed that low-cost smart devices from Amazon and Walmart, including digital photo frames and streaming boxes, are being shipped with pre-installed malware that routes internet traffic through users' connections. This malware, identified as residential proxy software, allows cybercriminals to conduct illicit activities while masking their identity. The FBI has issued warnings about these compromised devices, estimating that around 20 million households in the U.S. are affected. The malware is embedded at the factory level, making traditional security measures ineffective. Users remain unaware as their internet connections are exploited for activities like bank fraud and phishing. The investigation found that all tested devices connected to criminal networks immediately upon being powered on. Consumers are urged to check for specific warning signs to identify potentially compromised devices.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (4)
Following this threat?
Track Flax Typhoon and Badbox 2.0 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Chinese Cyber Actors Exploit Vulnerabilities via Integrity Technology Group Chinese government-linked cyber threat actors, associated with Integrity Technology Group, are using a combination of automated tools and hands-on techniques to exploit vulnerabilities and steal sensitive data from organizations globally. They target critical infrastructure sectors, including government, healthcare…
CISA Adds 7 Flaws to KEV Amid Active Exploitation by Flax Typhoon On October 11, 2026, CISA added seven vulnerabilities to its Known Exploited Vulnerabilities catalog, increasing the total to 1,739. Notably, five of these vulnerabilities were linked to the China-based group Flax Typhoon, which has been exploiting bugs since 2015. The vulnerabilities, including CVE-2021-3199 and…