Your Cheap Android TV Box Might Be a Secret Ad-Clicking Proxy

Robert Moore · 2026-07-31

You probably didn't think twice before plugging in that budget Android TV box from an unfamiliar brand. It streams movies, plays games, and costs less than a dinner for two. But according to new research from Bitsight, some of these cheap devices are doing something far sneakier behind your back. They're not just playing videos—they're pretending to be premium smartphones and turning your home internet connection into a money-making proxy for someone else. ### What's Really Inside That $30 Streaming Box? Bitsight's researchers discovered that certain low-cost Android TV boxes ship with pre-installed apps that completely rewrite the device's hardware identity. Instead of appearing as a TV box, the device disguises itself as a Samsung, Huawei, Xiaomi, or Vivo phone. That fake identity isn't just for show. The apps use it to click on ads hosted on websites run by the very same operators who control the malware. It's a clever little scheme. Advertisers pay for clicks, the operators collect the revenue, and you're left with a device that's quietly working against you. The researchers named this operation "Fuyao" and traced it back to Zhejiang Fengwo IoT Technology Co., Ltd., a mainland China company founded in 2019. ### The Second Job Nobody Signed Up For Here's where things get even more interesting. The same apps have a second job. When your TV box connects to your Wi-Fi, it doesn't just sit idle. It turns your broadband connection into a residential proxy. That means other people—or bots—can route their internet traffic through your home network, making their activities look like they're coming from a real person in the United States. Why does that matter? Because residential proxies are gold for anyone trying to bypass fraud detection, geo-restrictions, or ad verification systems. Your IP address becomes a shield for someone else's shady operations, and you'd never even know it. ### Why Should You Care About This? You might be thinking, "So what? My TV box streams fine, and I haven't noticed anything weird." But here's the thing: your internet connection is being used without your consent. That can lead to: - Slower broadband speeds because your connection is handling extra traffic - Your IP address getting flagged or blacklisted by websites and services - Potential legal or liability issues if someone uses your proxy for illegal activities - Privacy risks, since your network is essentially open to unknown third parties None of that sounds great, right? ### How to Protect Yourself If you already own a cheap Android TV box, you don't necessarily need to panic. But you should take a few precautions. First, check for any unfamiliar pre-installed apps and remove them if possible. Second, consider using a separate network or VLAN for your IoT devices so they can't interact with your main devices. And third, if you're in the market for a new streaming device, stick with well-known brands that have a track record of transparency and security. For professionals in the antidetect browser space, this discovery is a reminder that device fingerprinting and identity spoofing aren't just tools for privacy advocates. They're also weapons for malicious actors. The same techniques that let you manage multiple accounts safely can be twisted to commit ad fraud and hijack innocent users' bandwidth. ### The Bottom Line The Fuyao operation is a wake-up call. Cheap hardware often comes with hidden costs, and in this case, the cost is your privacy and your internet connection. Whether you're a casual streamer or a digital privacy professional, understanding these threats is the first step toward protecting yourself. Stay curious, stay cautious, and always think twice before plugging in that bargain-bin gadget.