The Silent Hijack: How Millions of Streaming Devices Became the Backbone of a Global Botnet

For the past four years, a sprawling, shadow-network of Android-based TV boxes has been operating in millions of living rooms across the globe. Unbeknownst to their owners, these devices—often purchased as cheap, plug-and-play solutions for streaming subscription content—have been surreptitiously enlisted into a sophisticated botnet known as Popa. Unlike the destructive botnets of the past,…

Read More

The Silent Hijack: How Millions of Streaming Boxes Power a Global Proxy Botnet

For the past four years, a sprawling, shadow-like infrastructure known as "Popa" has quietly co-opted millions of consumer Android-based TV boxes. Rather than launching the headline-grabbing distributed denial-of-service (DDoS) attacks typically associated with botnets, Popa operates with a more subtle, persistent objective: transforming living-room streaming devices into a global relay network for commercial residential proxies….

Read More

The Silent Hijack: How Millions of Streaming Boxes Power a Global Proxy Botnet

For the past four years, an expansive and largely invisible infrastructure known as the Popa botnet has quietly co-opted millions of consumer Android-based TV boxes. These devices, often purchased for their ability to stream subscription video content for a one-time fee, are being weaponized to relay massive volumes of internet traffic. Security researchers have now…

Read More

The Silent Hijack: How Millions of Streaming Devices Became the Engine of a Global Proxy Botnet

For the past four years, a sprawling, shadow-like infrastructure known as Popa has operated beneath the radar of mainstream cybersecurity, turning millions of consumer Android TV boxes into involuntary relay stations for malicious internet traffic. While the name may not carry the notoriety of high-profile ransomware gangs, its reach is vast. Security researchers have now…

Read More

The Invisible Hijack: Inside the Massive ‘Popa’ Botnet Fueling the Global AI Scraping Economy

For the past four years, a digital shadow has loomed over millions of living rooms worldwide. A sprawling, Android-based botnet known as Popa has quietly commandeered consumer TV streaming boxes, transforming them into relay points for massive, global-scale data scraping, advertising fraud, and unauthorized account access. This week, a multi-firm investigation—involving researchers from Qurium, Synthient,…

Read More