RESEARCHERS have identified a risk tied to certain “free” streaming boxes, notably SuperBox devices and apps such as CyberFlix TV, that can quietly enroll a household’s internet connection in a residential proxy network. This allows third parties to route traffic through the home network, making activity appear to originate from the consumer’s own connection.
Plume Security Labs’ reporting describes how CyberFlix TV’s presence in SuperBox’s app store can register devices with a proxy operator, turning the home into an exit point for potentially illicit traffic.
Residential proxy networks rent ordinary home IPs to customers, enabling criminals to mask activity and evade IP-based controls, with risks ranging from credential stuffing to general account abuse. Even worse, these proxy networks can function as malware-delivery platforms, meaning a compromised streaming device could be used not only to forward traffic but also to receive further malicious software.
The reported SuperBox configuration raised additional concerns: exposed Android Debug Bridge access, root privileges without authentication, and weakened safeguards that normally restrict untrusted apps. The FBI’s definition of a residential proxy is cited to explain how such setups obscure origin and location, while still being treated by a home router as legitimate traffic.
To stay safe, the article advises unplugging devices like SuperBox from the network, as factory resets may not fully restore safety, and replacing the device where possible. It also notes that segmenting networks can reduce exposure for IoT devices, though it is not a complete remedy for persistent proxy channels.