Cheap TV boxes and smart TVs are being turned into botnets for cyberattacks.

Cyber ​​attackers have exploited TV Boxes and Smart TVs using customized operating systems, insecure software configurations, and weak security settings to gain control of these devices and turn them into part of a botnet.

Numerous inexpensive TV boxes and smart TVs currently on the market lack security checks.

Cybersecurity experts at Bkav have identified the existence of a large-scale botnet infrastructure (a network of computers or devices infected with malware and remotely controlled by hackers) called Kimwolf.

According to published cybersecurity reports, Kimwolf has controlled over 2 million devices worldwide . Vietnam is among the countries severely affected, alongside Brazil, India, and Saudi Arabia, due to the prevalence of cheap, unbranded TV boxes and smart TVs.

According to cybersecurity experts at Bkav, the main reason stems from a lack of security control in the device supply chain. Numerous inexpensive TV boxes and smart TVs currently use customized operating systems, outdated software, and lack regular security patch updates. Even more dangerously, many devices come pre-installed with opaque software before reaching consumers, making it difficult for users to identify and remove, even through factory resets.

Accordingly, when the device is connected to the Internet, the malware automatically runs in the background and communicates with the hacker's remote control server. Instead of damaging the device, the Kimwolf malware turns the user's TV Box and Smart TV into an Internet transit point, allowing it to use the user's legitimate IP address.

Statistics from reports indicate that approximately 12 million unique public IP addresses linked to the Kimwolf botnet infrastructure are recorded each week, concentrated in several countries, including Vietnam.

These IP addresses are sold or leased on the black market to facilitate large-scale cyberattacks; turning smart TVs and TV boxes into links in botnets that launch denial-of-service (DDoS) attacks or illegally forward internet traffic; creating a cover for illicit activities in cyberspace without the user's knowledge. The consequences not only affect device performance and internet connection quality, but also pose potential legal risks to the victims – the owners of the internet connection.

To minimize risks and prevent the misuse of household devices, Bkav advises users to: Choose only devices from reputable manufacturers with clear origins and regular security updates. Users should also monitor for unusual signs such as slow device performance, automatic installation of unfamiliar applications, or abnormal internet bandwidth consumption. Upon detecting any unusual signs, users should disconnect from the internet and consider discontinuing use of devices that cannot be controlled or whose security cannot be guaranteed.

BA TAN

Source: https://www.sggp.org.vn/tv-box-smart-tv-gia-re-bi-bien-thanh-botnet-tan-cong-mang-post833740.html