SuperBox Devices Compromise Home Networks for Cybercrime

• •SuperBox devices can silently enroll users into residential proxy networks.
• •Compromised devices may be used for various cybercrimes, including credential stuffing.
• •Research indicates these networks can also serve as malware delivery platforms.

Research reveals that SuperBox streaming devices can enroll users into residential proxy networks without their knowledge, allowing cybercriminals to route illicit traffic through compromised home networks. The FBI defines residential proxies as intermediaries that mask users' identities, making them appear responsible for activities initiated by attackers. This issue is exacerbated by the devices' configurations, which disable Android security safeguards, exposing them to malware delivery. Law enforcement warns that these proxy networks can facilitate various cybercrimes, including credential stuffing and account abuse. The Plume Security Lab's findings indicate that these devices not only serve as exit nodes for criminal activities but can also be targeted for additional malware installations. Users of affected devices are at risk of having their internet connections exploited for malicious purposes.