Think twice before installing this device promising free movies
In exchange for free stuff, devices make home connections part of a proxy network.
In exchange for free stuff, devices make home connections part of a proxy network.
The short version
- “Our researchers found that these residential proxy networks are not simply monetization tools,” Plume researchers wrote .
- “Combined with root access, a single pm install command can silently install any APK.
- “This combination results in further infections involving additional residential proxies or IoT botnets, and the attackers are often the very customers of the primary proxy network,” Plume wrote.
What happened
The recently disrupted Popanet, for instance, blocks local IP address ranges from outside the local network. Even then, Popanet users can access local IPs by specifying the special wildcard address 0.0.0.0, which Android then routes to the SuperBox IP 127.0.0.1.
Why it matters
From that vantage point, proxy users can access the rest of the local network.
Summary by Nerd News Network. Read the full article at Ars Technica via the links above and below.