Shulou(Shulou.com)11/24 Report--

Thanks to CTOnews.com netizen Alejandro86 for the clue delivery! CTOnews.com, October 10 (Xinhua) according to security company securityaffairs, there are several cheap Android TV boxes on the market with factory firmware that come with Trojans named "Triada". These TV boxes are usually unbranded or sold under different names and usually sell for less than $50 overseas. (CTOnews.com Note: currently about RMB 365).

Daniel Milisic, a security researcher at securityaffairs, a ▲ security company, discovered in January that an Android TV box called T95 was infected with malware when it came out of the factory, and several other researchers confirmed this finding from other TV boxes.

Researchers believe that there are at least 74000 Android TV boxes on the market, which may be affected by related security issues.

It is reported that the Android TV boxes with their own firmware are called "Bad Box", and the firmware back door is based on the Triada Trojan, which was first discovered by researchers at Kaspersky Lab in 2016 and is said to have appeared in several cheap Android smartphones.

Triada is designed to implement financial fraud, usually to hijack financial text message transactions. Apart from the Triada Trojan, the most interesting feature of the Triada Trojan is its modular architecture, which theoretically gives it "extensive capabilities".

The researchers say users should stop using these cheap TV boxes:

Unfortunately, the average user cannot save Bad Box devices. Because the Trojan is in the read-only (ROM) partition of the device firmware, ordinary users cannot remove Bad Box from their products. Since BADBOX affects lower-priced "non-brand" devices almost entirely, the team advises users to stick to reliable brands when choosing TV boxes.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.