Bitsight uncovered Fuyao, an operation tied to Zhejiang Fengwo IoT Technology Co., Ltd., in which cheap Android TV boxes spoof phone identities and click ads while also relaying traffic as SOCKS5 exit nodes. The campaign uses a custom automation stack with YOLOv8s, Blockly, and ad-network infrastructure to drive fraud, but the full list of affected devices and packages remains incomplete. #Fuyao #ZhejiangFengwoIoTTechnology #H96_MAX_V11 #Taboola
Keypoints
- Fuyao devices spoof Samsung, Huawei, Xiaomi, and Vivo phone identities.
- The same boxes click ads and can relay traffic as SOCKS5 exit nodes.
- Bitsight linked the operation to Zhejiang Fengwo IoT Technology Co., Ltd.
- The fraud stack uses YOLOv8s, Android accessibility data, OCR, and Blockly.
- Owners are advised to verify Play Protect certification and disconnect suspicious devices.
Read More: https://thehackernews.com/2026/07/cheap-android-tv-boxes-pose-as-phones.html