Public warned that home TV devices are being used in large-scale cyberattacks

Eva Osborne

People are being warned that their Android TV boxes or TV streaming devices could be quietly compromised and used as part of large-scale cyberattacks.

Grant Thornton Ireland said the warning follows the largest volumetric distributed denial of service attack ever recorded.

These kinds of attacks attempt to disrupt a server, service, or network by overwhelming it with a flood of internet traffic from multiple and often compromised sources.

Grant Thornton Ireland said the attack was launched by a botnet known as Kimwolf, made up predominantly of compromised Android-enabled televisions and TV streaming devices.

Security researchers have warned that millions of low-cost, poorly secured devices around the world could be infected and remotely controlled by cybercriminals.

Cybersecurity partner at Grant Thornton Ireland, Howard Shortt, said the incident highlights that cyber threats are not limited to workplace technology equipment, with individuals increasingly targeted via commonly used home devices.

“Many people don’t realise that a low-cost Android TV box in their sitting room or a cheap smart lightbulb can be compromised in seconds,” he said.

“Once attackers gain access, they can use that device as part of a botnet or quietly profile the household to support more targeted and convincing phishing attacks.

“Attackers typically exploit default passwords, outdated software, or unpatched vulnerabilities in internet-connected devices and once inside a home network, can observe traffic patterns and build a profile of the household.

“That information allows criminals to engineer highly believable phishing messages. For example, posing as a streaming provider with a prompt to review a show you have just watched. At that point, the scam is no longer random and much more believable.”

Shortt advises the public to take a proactive approach to home cybersecurity, starting with some basic steps such as changing default passwords on all smart devices and routers, as well as only purchasing reputable brands from legitimate vendors.