Warning: Bogus ‘Amazon TV Stick’ Could Be a Gateway for Scammers

Imagine it’s Saturday night and there’s a big fight airing on pay-per-view television, but you’re hesitant to spend money to watch it. Fortunately, you’ve managed to buy a budget-friendly Amazon Fire Stick from the internet that promises access to all the sports events and streaming services you desire.

While the streaming quality might not be top-notch, it seems like a smart way to avoid monthly subscription costs and hefty fees for major sports broadcasts. You think you’ve snagged a great deal.

However, using a modified Amazon Fire Stick connected to your laptop or TV can dangerously expose your financial details and passwords to cybercriminals, potentially leading to substantial financial loss and identity theft.

A study by BeStreamWise, a British campaign addressing this issue, revealed that two-fifths of illegal streamers have been defrauded, losing an average of nearly £1,700 each.

“Illegal streaming may seem like an easy way to cut costs, but it’s a deceptive saving that could cost thousands,” notes DCI Emma Warbey from the police intellectual property crime unit (PIPCU) at City of London police.

“This kind of crime not only diverts funds from the entertainment industry, which supports numerous technical and support jobs, it also exposes consumers to significant risks of data theft, cybercrime, and fraud,” she adds.

The altered or “jailbroken” devices are Amazon Fire Sticks that have been tampered with additional software, available online for around £20.

Their increasing prevalence has prompted actions by the Federation Against Property Theft (Fact), which has conducted raids across the UK to curb their distribution.

In one incident reported by BeStreamWise, a man’s banking information was compromised twice, and an attempt was even made to purchase a boat under his name.

Understanding the Scam

These devices are often sold on social media and through websites dedicated to illegal streaming, frequently advertised as being jailbroken with offers of free access to TV shows, sports, and movies.

The risk of fraud begins the moment you connect these questionable devices to your computer or TV, explains Rob Shapland of Cyonic Cyber, an ethical hacker who helps businesses identify security vulnerabilities.

“Along with the stream, it will install malware on your computer, giving the hacker as if they were physically present at your device,” he states.

“They could also install keyloggers to capture any passwords you type, including those for online banking, essentially making you an unwitting participant in the hacking of your own device,” he continues.

Often, these devices come with instructions that seem legitimate but are actually methods to disable virus detection.

Once connected to your TV, these devices can access other devices on your home wifi network, Shapland warns.

“It might prompt you to log in with your Google account, and once you do, your credentials are sent directly to the criminals. Since many people reuse passwords, gaining one could potentially give them access to numerous other accounts,” he explains.

Some modded sticks even ask for a small monthly subscription, which is a tactic for obtaining your credit card details for potential misuse.

Recommended Actions

If you discover that your device is illegal, it is crucial to disconnect it from your system without delay.

Next, update the passwords for all critical websites and applications, such as those for banking, investments, pensions, and PayPal, advises Shapland. Additionally, enable multifactor authentication to enhance your security.

Revert any modifications to your antivirus software made by the device’s software and conduct a thorough virus scan on your computer, which you can do using free tools available online.

If you’ve been defrauded, the damage likely occurred when the device was first connected, according to Shapland.

In the UK, report the incident to Action Fraud, the national fraud reporting center, and inform your bank of what transpired.

Amazon has confirmed that convictions have been secured in relation to the sale of modified devices, and the company continues to collaborate with law enforcement agencies to halt these illegal sales. “Piracy is unlawful, and customers are advised against purchasing these devices,” the company stated.