Bitsight researchers have uncovered a widespread operation, ‘Fuyao,’ where cheap Android TV boxes are shipped with pre-installed malicious apps. These apps spoof their hardware identity to mimic popular phone brands, then engage in ad fraud on operator-controlled websites. Additionally, the devices covertly turn owners’ broadband connections into proxy networks, effectively renting out their internet access to strangers. This poses significant privacy and security risks to unsuspecting users.