Used to illegally access paid channels and streamings, tv boxes unapproved represent a risk for users. THE National Telecommunications Agency (Anatel) says he has found more vulnerabilities in these devices.
According to Moisés Moreira, advisor to the agency, “security flaws were identified in the application update process”. This allows the exchanged information to be modified by a malicious actor. In this way, it is possible to install malicious apps on devices.
Anatel technicians also say that third parties can gain unrestricted access to the device, with administrator privileges.
In addition, devices connected to the same network as the non-approved TV box were vulnerable to the remote execution of applications. It is also possible to capture screenshots and even record them without the user noticing.
Anatel carries out the tests in partnership with technicians from the National Cinema Agency (Ancine) and the Brazilian Association of Pay Television (ABTA).
The studies even involve a “proof of concept”, to simulate a typical residential environment, with cell phones, tablets and computers connected to the same router as the TV box.
Backdoors and malware for data theft
It is not the first time that Anatel tests these products and encounters problems.
The agency discovered that it was possible to open backdoors using some Android applications. In this way, it is possible to monitor all the network signals in which the TV box is connected, including personal data🇧🇷
Another vulnerability allows canisters to be used for distributed denial of service attacks, also known as DDoS🇧🇷
These actions use huge numbers of hacked devices to trigger simultaneous requests to a website or app, even crashing the server and taking it offline.
In 2021, Anatel discovered that the HTV model, the best-selling model in Brazil at that time, came with a malware to steal personal data and send it abroad🇧🇷 The suspicions that the device would be used to mine cryptocurrencies, however, were not confirmed.
With information: Anatel🇧🇷
https://tecnoblog.net/noticias/2022/12/23/tv-box-pirata-pode-espiar-tela-de-celular-conectado-a-mesma-rede-diz-anatel/