H96 TV Streaming Stick Ad Fraud via Pre-installed Malware

Vulnerability Overview Vulnerability Name: TV Streaming Stick Ad Fraud Vulnerability Description: Research has revealed that certain TV streaming sticks (such as H96 models) are being used to coordinate fake clicks and execute ad fraud. These devices, pre-loaded with malware, collect hardware information and spoof the identity of mobile phones to send fraudulent clicks to ad networks. Source: Discovered by Pedro Falé, a security researcher at Bitsight. Impact Scope Affected Devices: H96 TV streaming sticks, including products from multiple manufacturers such as Samsung, Vivo, Huawei, and Xiaomi. Volume of Impact: An estimated 38,000 TV streaming sticks worldwide are being exploited for ad fraud. Impact Method: The devices utilize pre-installed malware to collect hardware information and impersonate mobile phones, sending fake clicks to ad networks to generate illicit advertising revenue. Remediation User Recommendations: - Avoid purchasing or using these TV streaming sticks with known security risks. - If you already own these devices, it is recommended to disconnect them from power or uninstall the pre-installed malware. - Opt for officially certified Android TV devices and applications to ensure security and legitimacy. Manufacturer Recommendations: - Manufacturers should strengthen device security measures to prevent the pre-installation of malware. - Provide security updates and patches to address known vulnerabilities. POC Code or Exploit Code No Specific POC Code: No specific Proof of Concept (POC) code or exploit code was provided in the report. Additional Information Related Entities: Zhejiang Fengwo IoT Technology Ltd., which operates an ad publishing portfolio known as Fengwo Group. Technical Details: The devices use pre-installed malware to collect hardware information and spoof mobile phone identities, sending fake clicks to ad networks. The malware also includes machine-generated articles and graphics to simulate human behavior. Summary This vulnerability highlights the potential risks associated with TV streaming sticks in the context of ad fraud, affecting a significant number of users and devices. Both users and manufacturers should take appropriate measures to ensure the security and legitimacy of these devices.

Goal Reached Thanks to every supporter — we hit 100%!

H96 TV Streaming Stick Ad Fraud via Pre-installed Malware