H96 TV Streaming Stick Ad Fraud: 38,000 Devices Spoofing Phones for Click Fraud
Source: https://krebsonsecurity.com/2026/07/read-this-before-you-buy-that-tv-streaming-stick/
Author: Brian Krebs
Date: 2026-07-30
Summary (Chinese)
Krebs 联合 Bitsight 的深度调查：研究人员注册了一个过期域名，意外接管了约 38,000 台 H96 安卓电视棒的遥测通道。这些设备不仅在 TV 开着时充当住宅代理出租 IP，TV 关着时还伪装成三星/华为/小米手机，访问蜂窝集团运营的 AI 生成网站，点击广告实施欺诈。日收入估计 5 万美元。
Summary (English)
Krebs and Bitsight investigation: registering an expired domain gave control of telemetry from ~38,000 H96 Android TV sticks. Devices act as residential proxies when TV is on, and spoof as Samsung/Huawei/Xiaomi phones to click ads on AI-generated websites operated by Fengwo Group when TV is off. Estimated $50K/day fraud revenue.
One-liner
38,000 台电视棒关着时伪装手机点广告，日收入 5 万美元
*Imported from Obsidian digest notes on 2026-08-01. Content grounded in fetched source metadata via opencli.*