Popa botnet hijacks cheap Android TV boxes to route stranger traffic through home internet

Millions of cheap Android TV boxes are reportedly being hijacked by the Popa botnet, turning them into residential proxies that route strangers' internet traffic through home Wi-Fi networks. This botnet, linked to ad fraud and data scraping, exploits unofficial streaming devices that promise free access to paid content. The traffic appears to originate from legitimate home IP addresses, masking illicit activities. Security researchers warn that even smart TV apps can contain hidden tools for sharing home internet. Consumers are advised to avoid uncertified devices and suspicious apps, and to secure their home networks.