Cheap Android TV Boxes Found Running a 38,000-Device Ad Fraud Net

Bitsight researcher Pedro Falé bought an expired domain that budget streaming devices had been using to coordinate, and watched roughly 38,000 TV boxes check in. The devices, sold under brands including H96, spoof themselves as Samsung, Vivo, Huawei and Xiaomi handsets and click ads on AI-generated websites, driving what Bitsight conservatively estimates at close to $50,000 a day. The coordination logic ships as apps built on a modified version of Google’s Blockly. The advice is unchanged and still worth repeating: buy from known manufacturers, and check for Play Protect certification and official Android TV OS rather than a generic Android build.