Plume Security Labs Exposes Hidden Proxy Network Inside SuperBox Streaming Devices that Route Potentially Harmful Traffic over Home Networks - Thailand PR News - [Banking](https://thailandbusinessnews.net/category/banking/) - [Companies](https://thailandbusinessnews.net/category/companies/) - [Economy](https://thailandbusinessnews.net/category/economy/) - [Press Releases](https://thailandbusinessnews.net/category/press-release/) - [PR Newswire](https://thailandbusinessnews.net/pr-newswire-updates/) - [Tech](https://thailandbusinessnews.net/category/tech/) - [Tourism](https://thailandbusinessnews.net/category/tourism/) - [Press Release](https://thailandbusinessnews.net/category/press-release/) # Plume Security Labs Exposes Hidden Proxy Network Inside SuperBox Streaming Devices that Route Potentially Harmful Traffic over Home Networks ##### Up next ###### [POMDOCTOR LIMITED Announces Plan to Implement ADS Ratio Change](https://thailandbusinessnews.net/press-release/pomdoctor-limited-announces-plan-to-implement-ads-ratio-change/) Published on 28 May 2026 ##### Author ##### [ CISION PRNewswire ](https://thailandbusinessnews.net/author/cision/) ##### Tags - [PRNewswire](https://thailandbusinessnews.net/tag/prnewswire/) ![](https://mma.prnasia.com/media2/1960101/Plume__Logo.jpg?p=medium600 "logo")*Investigation reveals media streaming devices sold at major U.S. retailers silently tunnel third-party internet traffic, including potentially stolen credentials and enterprise security bypass operations through subscribers’ home broadband connections* PALO ALTO, Calif., May 28, 2026 /PRNewswire/ — [**Plume Design, Inc.**](https://edge.prnewswire.com/c/link/?t=0&l=en&o=4698178-1&h=2079560866&u=https%3A%2F%2Fwww.plume.com%2F&a=Plume+Design%2C+Inc.) ("Plume"), the global subscriber experience platform for more than 450 Internet Service Providers (ISPs) across 58 countries, today released a [**report**](https://edge.prnewswire.com/c/link/?t=0&l=en&o=4698178-1&h=826727564&u=https%3A%2F%2Fwww.plume.com%2Fresources%2Fsuperproxy-the-unhealthy-marriage-of-superbox-and-residential-proxies&a=report) that uncovers significant security concerns found in SuperBox Android streaming devices sold at major U.S. retailers, which contain dormant software that when activated converts consumers’ home internet connections into nodes in a residential proxy network or SuperProxy. The proxy routes unknown third-party traffic that includes potentially stolen credentials, account takeover materials and enterprise security bypass operations through subscriber households without their knowledge or consent. The report, based on a months-long investigation, is the first in a series from Plume’s Security Labs. [![Plume Security Labs Exposes Hidden Proxy Network Inside SuperBox Streaming Devices that Route Potentially Harmful Traffic over Home Networks.](https://mma.prnasia.com/media2/2989435/PLUME_DESIGN_INC__Security_Labs.jpg?p=medium600 "Plume Security Labs Exposes Hidden Proxy Network Inside SuperBox Streaming Devices that Route Potentially Harmful Traffic over Home Networks.")](https://mma.prnasia.com/media2/2989435/PLUME_DESIGN_INC__Security_Labs.jpg?p=medium600) Plume Security Labs Exposes Hidden Proxy Network Inside SuperBox Streaming Devices that Route Potentially Harmful Traffic over Home Networks. "The average connected home is becoming increasingly complex, more like a corporate network, and threats like this one illustrate the need for significantly enhanced levels of intelligence and security," said Chris Griffiths, Chief Technology Officer at Plume. "ISPs are better situated than ever to be on the forefront of detecting and resolving these issues. By leveraging AI and large-scale network orchestration across hundreds of millions of devices, we can help ISPs spot anomalies that individual households or traditional security tools often miss, and act on them before they spread." Plume manages one of the most comprehensive data sets in the telecommunications industry, monitoring more than 500 million connected devices across 40 million households globally. After an alert from a customer, Plume’s Network Operations Center flagged anomalous outbound traffic from an unusually high number of streaming devices across its network. The traffic volume was sufficient to destabilize residential networks, prompting Plume’s Security Labs to launch a comprehensive technical investigation into streaming devices, spanning multiple models, across its user base. "The SuperProxy investigation is a wake-up call," said Eric Svenson, Vice President, Technology Engineering and Operations at Armstrong, (a multi-state operator based in Pennsylvania). "Consumer devices are being weaponized inside our subscribers’ homes, and as their ISP, we have both the responsibility and the vantage point to do something about it. Plume’s research is the kind of partnership our industry needs more of; work that protects Armstrong customers today and sets a higher standard for what every subscriber should expect from their provider." "These devices ship with remote access and full administrative control, wide open and require no password, no authentication, no user approval," said Griffiths. "Unfortunately, this isn’t limited to a single product. The same residential proxy software was used in other types of consumer media streaming devices and also used in other malicious campaigns such as the Vo1d botnet, which demonstrates this is a broader supply-chain problem across the streaming ecosystem." **Five Key Findings** **A streaming app secretly turns the device into a proxy network node.** One of the apps available through SuperBox’s custom application store, Cyberflix TV, contains hidden proxy software called Popanet that silently registers the device with a remote command server and begins relaying foreign internet traffic through the subscriber’s home connection. Plume’s telemetry recorded tens of thousands of outbound connections per device per day to thousands of distinct destinations. **Sensitive credentials and security bypass attempts are flowing through subscriber homes.** Researchers intercepted the actual traffic being routed through the proxy and found sensitive login credentials for gaming platforms, messaging app verification codes that could be used for real-time account takeovers, deliberate attempts to defeat enterprise security systems and large-scale automated web scraping, all passing through consumer broadband connections without the subscriber’s knowledge. **Plume mapped more than 250 proxy server addresses.** Researchers fully reverse-engineered Popanet’s command-and-control protocol — the first publicly known teardown of this system — and mapped more than 250 verified server addresses across multiple hosting providers, revealing a professionally built proxy operation. **A security flaw in the proxy’s own code exposes the home network.** The proxy attempts to block access to the subscriber’s local network, but contains a bypass that was confirmed through live testing. Remote proxy users can exploit this flaw to reach the device’s own internal services, potentially extending the compromise beyond the device to the home network itself. **SuperBox’s custom app store bypasses all standard Android safety checks.** The store installs software silently with full administrative privileges: no security verification, no warnings and no user approval. Its catalog is controlled by the store’s operator, not by Google nor the device owner. **Plume’s Approach** Plume is identifying and isolating these proxies for blocking at multiple levels and sharing intelligence with its ISP customers. Monitoring these proxies is extending Plume’s detection capabilities to additional threat types including Distributed Denial of Service (DDoS) tools and botnets. **Multi-phased Research** This is Part 1 of a three-part investigative series into SuperBox and the hidden security risks it presents inside subscriber homes. Part 2 will expose the malware ecosystem exploiting subscriber devices, including botnet agents and competing proxy SDKs, and detail how Plume helps ISPs detect and block these threats. Part 3 will examine the content delivery infrastructure behind SuperBox’s "latest movies" promise, presenting technical evidence that raises serious questions about the origin of that content. The full research paper is available at: [**plume.com/resources/superproxy-the-unhealthy-marriage-of-superbox-and-residential-proxies**](https://edge.prnewswire.com/c/link/?t=0&l=en&o=4698178-1&h=1246350795&u=https%3A%2F%2Fwww.plume.com%2Fresources%2Fsuperproxy-the-unhealthy-marriage-of-superbox-and-residential-proxies&a=plume.com%2Fresources%2Fsuperproxy-the-unhealthy-marriage-of-superbox-and-residential-proxies) **About Plume** Plume established the first managed WiFi platform for ISPs in 2016, enabling the company to scale across the globe and expand into managing the entire subscriber experience, including approximately 500 million connected devices, in 40 million homes, on behalf of 450 ISPs, across 58 countries. By integrating managed WiFi, cybersecurity and customer care, Plume created the first open, hardware-agnostic SaaS Subscriber Experience Platform for ISPs. Powered by an unmatched global dataset and AI optimization, the Plume Platform builds subscriber confidence through improved Wi-Fi experiences, seamless new service implementation and proactive customer care. Plume’s open-source framework OpenSync® is pre-integrated and supported on the leading silicon, CPE and platform SDKs, and supports leading industry standards like RDK-B and prplWave. Discover more about how Plume is empowering ISPs at [**plume.com**](https://edge.prnewswire.com/c/link/?t=0&l=en&o=4698178-1&h=3687425490&u=https%3A%2F%2Fwww.plume.com%2F&a=plume.com). **About Armstrong** For over 80 years, Armstrong has been a leader in telecommunications technology and innovation. Founded in 1946 by Jud L. Sedwick as Armstrong County Line Construction, Armstrong remains a family-owned and operated company deeply committed to the communities it serves. Armstrong’s world-class fiber network spans six states—Pennsylvania, Ohio, Maryland, New York, West Virginia, and Kentucky—delivering advanced infrastructure with a focus on exceptional customer service and satisfaction. The company provides 24/7 local support, transparent pricing, and complimentary technical service to residential and business customers throughout its service area. For more information on Armstrong’s Advanced Fiber Network, please visit [ArmstrongOneWire.com/network](https://edge.prnewswire.com/c/link/?t=0&l=en&o=4698178-1&h=184796061&u=http%3A%2F%2Farmstrongonewire.com%2Fnetwork&a=ArmstrongOneWire.com%2Fnetwork). [Source link ](http://www.prnasia.com/story/archive/4969669_AE69669_0?rand=89749) ``` This content was prepared by our news partner, Cision PR Newswire. The opinions and the content published on this page are the author’s own and do not necessarily reflect the views of Siam News Network ``` ##### You May Also Like [](https://thailandbusinessnews.net/press-release/compal-redefines-ai-driven-data-centers-with-cxl-and-liquid-cooling-innovations-at-the-2025-ocp-global-summit/) ![Compal Redefines AI-Driven Data Centers with CXL and Liquid Cooling Innovations at the 2025 OCP Global Summit](https://i0.wp.com/r2.thailandbusinessnews.net/2025/10/Compal_Redefines_AI_Driven_Data_Centers_CXL_Liquid_Cooling_Innovations_2025.jpg?resize=260%2C140&ssl=1 "Compal Redefines AI-Driven Data Centers with CXL and Liquid Cooling Innovations at the 2025 OCP Global Summit") - [Press Release](https://thailandbusinessnews.net/category/press-release/) ## Compal Redefines AI-Driven Data Centers with CXL and Liquid Cooling Innovations at the 2025 OCP Global Summit SAN JOSE, Calif., Oct. 14, 2025 /PRNewswire/ — As AI compute demand… - [CISION PRNewswire](https://thailandbusinessnews.net/author/cision/ "View all posts by CISION PRNewswire") - October 13, 2025 [](https://thailandbusinessnews.net/press-release/from-doomscroll-to-page-turner-bookxcess-launches-the-brain-un-rot-library-to-help-rebuild-a-generations-focus/) ![From Doomscroll to Page-Turner: BookXcess Launches The Brain Un-Rot Library to Help Rebuild a Generation's Focus](https://i0.wp.com/mma.prnasia.com/media2/2946543/Brain_Un_Rot_KV_FINAL_16_9.jpg?resize=260%2C140&ssl=1 "From Doomscroll to Page-Turner: BookXcess Launches The Brain Un-Rot Library to Help Rebuild a Generation's Focus") - [Press Release](https://thailandbusinessnews.net/category/press-release/) ## From Doomscroll to Page-Turner: BookXcess Launches The Brain Un-Rot Library to Help Rebuild a Generation's Focus A bold cultural experiment turns TikTok’s addictive storytelling style into a gateway… - [CISION PRNewswire](https://thailandbusinessnews.net/author/cision/ "View all posts by CISION PRNewswire") - March 31, 2026 [](https://thailandbusinessnews.net/press-release/blue-planet-advances-climate-ready-education-at-the-kaizenvest-and-insead-education-symposium-2025/) ![Blue Planet Advances Climate-Ready Education at the Kaizenvest and INSEAD Education Symposium 2025](https://i0.wp.com/r2.thailandbusinessnews.net/2025/10/Blue_Planet_Co_founder___CEO_Prashant_Singh_spoke_climate_ready_education.jpg?resize=260%2C140&ssl=1 "Blue Planet Advances Climate-Ready Education at the Kaizenvest and INSEAD Education Symposium 2025") - [Press Release](https://thailandbusinessnews.net/category/press-release/) ## Blue Planet Advances Climate-Ready Education at the Kaizenvest and INSEAD Education Symposium 2025 SINGAPORE, Oct. 16, 2025 /PRNewswire/ — Blue Planet Environmental Solutions participated in… - [CISION PRNewswire](https://thailandbusinessnews.net/author/cision/ "View all posts by CISION PRNewswire") - October 16, 2025 ##### Most Read - [![Stevie® Awards Announce Winners in The 22nd Annual International Business Awards® from Across the Globe](https://i0.wp.com/r2.thailandbusinessnews.net/2025/08/The_Stevie_Awards_IBA25_Winners.jpg?fit=600%2C600&ssl=1&resize=40%2C40)](https://thailandbusinessnews.net/press-release/stevie-awards-announce-winners-in-the-22nd-annual-international-business-awards-from-across-the-globe/ "Stevie® Awards Announce Winners in The 22nd Annual International Business Awards® from Across the Globe") [Stevie® Awards Announce Winners in The 22nd Annual International Business Awards® from Across the Globe](https://thailandbusinessnews.net/press-release/stevie-awards-announce-winners-in-the-22nd-annual-international-business-awards-from-across-the-globe/ "Stevie® Awards Announce Winners in The 22nd Annual International Business Awards® from Across the Globe") - [![Africa Business and Human Rights Forum Concludes in Dakar with Call for Stronger Action on Human Rights and the Environment](https://secure.gravatar.com/avatar/96e712b5408b51145de772098c3ff3417ce8a11555b7c388d84204c5769f5631?s=40&d=blank&r=g)](https://thailandbusinessnews.net/press-release/africa-business-and-human-rights-forum-concludes-in-dakar-with-call-for-stronger-action-on-human-rights-and-the-environment/ "Africa Business and Human Rights Forum Concludes in Dakar with Call for Stronger Action on Human Rights and the Environment") [Africa Business and Human Rights Forum Concludes in Dakar with Call for Stronger Action on Human Rights and the Environment](https://thailandbusinessnews.net/press-release/africa-business-and-human-rights-forum-concludes-in-dakar-with-call-for-stronger-action-on-human-rights-and-the-environment/ "Africa Business and Human Rights Forum Concludes in Dakar with Call for Stronger Action on Human Rights and the Environment") - [![Huawei New-Gen OceanStor Dorado Converged All-Flash Storage Passes Enterprise Strategy Group Technical Validation](https://secure.gravatar.com/avatar/96e712b5408b51145de772098c3ff3417ce8a11555b7c388d84204c5769f5631?s=40&d=blank&r=g)](https://thailandbusinessnews.net/press-release/huawei-new-gen-oceanstor-dorado-converged-all-flash-storage-passes-enterprise-strategy-group-technical-validation/ "Huawei New-Gen OceanStor Dorado Converged All-Flash Storage Passes Enterprise Strategy Group Technical Validation") [Huawei New-Gen OceanStor Dorado Converged All-Flash Storage Passes Enterprise Strategy Group Technical Validation](https://thailandbusinessnews.net/press-release/huawei-new-gen-oceanstor-dorado-converged-all-flash-storage-passes-enterprise-strategy-group-technical-validation/ "Huawei New-Gen OceanStor Dorado Converged All-Flash Storage Passes Enterprise Strategy Group Technical Validation") - [![Relativity Brings Powerful Legal Data Intelligence to Microsoft Copilot, Expanding AI Assistant Support for Legal Teams](https://secure.gravatar.com/avatar/96e712b5408b51145de772098c3ff3417ce8a11555b7c388d84204c5769f5631?s=40&d=blank&r=g)](https://thailandbusinessnews.net/press-release/relativity-brings-powerful-legal-data-intelligence-to-microsoft-copilot-expanding-ai-assistant-support-for-legal-teams/ "Relativity Brings Powerful Legal Data Intelligence to Microsoft Copilot, Expanding AI Assistant Support for Legal Teams") [Relativity Brings Powerful Legal Data Intelligence to Microsoft Copilot, Expanding AI Assistant Support for Legal Teams](https://thailandbusinessnews.net/press-release/relativity-brings-powerful-legal-data-intelligence-to-microsoft-copilot-expanding-ai-assistant-support-for-legal-teams/ "Relativity Brings Powerful Legal Data Intelligence to Microsoft Copilot, Expanding AI Assistant Support for Legal Teams") - [![iSMART Developments Ltd Announces Strategic Partnership with L'Oréal Groupe](https://secure.gravatar.com/avatar/96e712b5408b51145de772098c3ff3417ce8a11555b7c388d84204c5769f5631?s=40&d=blank&r=g)](https://thailandbusinessnews.net/press-release/ismart-developments-ltd-announces-strategic-partnership-with-loreal-groupe/ "iSMART Developments Ltd Announces Strategic Partnership with L'Oréal Groupe") [iSMART Developments Ltd Announces Strategic Partnership with L'Oréal Groupe](https://thailandbusinessnews.net/press-release/ismart-developments-ltd-announces-strategic-partnership-with-loreal-groupe/ "iSMART Developments Ltd Announces Strategic Partnership with L'Oréal Groupe") - [![A Singaporean Teen Wins Back To Back World Cup Titles](https://secure.gravatar.com/avatar/96e712b5408b51145de772098c3ff3417ce8a11555b7c388d84204c5769f5631?s=40&d=blank&r=g)](https://thailandbusinessnews.net/press-release/a-singaporean-teen-wins-back-to-back-world-cup-titles/ "A Singaporean Teen Wins Back To Back World Cup Titles") [A Singaporean Teen Wins Back To Back World Cup Titles](https://thailandbusinessnews.net/press-release/a-singaporean-teen-wins-back-to-back-world-cup-titles/ "A Singaporean Teen Wins Back To Back World Cup Titles") ##### Subscribe via Email Enter your email address to subscribe and receive notifications of new posts by email. Email Address Subscribe [](https://thailandbusinessnews.net/press-release/blokees-debuts-90-new-products-at-wonder-festival-shanghai-2026/) ![Blokees Debuts 90+ New Products at Wonder Festival Shanghai 2026](https://i0.wp.com/mmx.prnasia.com/media/MS2001950/20261003201107EDT_image_1.jpg?resize=260%2C140&ssl=1 "Blokees Debuts 90+ New Products at Wonder Festival Shanghai 2026") ## Blokees Debuts 90+ New Products at Wonder Festival Shanghai 2026 SHANGHAI, Oct. 4, 2026 /PRNewswire/ — From October 3 to 4, Assembly… [](https://thailandbusinessnews.net/press-release/sibionics-and-pharmasens-explore-new-horizons-for-automated-insulin-delivery-at-easd-2026/) ## SIBIONICS and PharmaSens Explore New Horizons for Automated Insulin Delivery at EASD 2026 MILAN, Oct. 4, 2026 /PRNewswire/ — At the European Association for the Study… [](https://thailandbusinessnews.net/press-release/roboparty-unveils-rp1-a-high-performance-full-stack-open-source-humanoid-robot-at-iros-2/) ![RoboParty Unveils RP1, a High-Performance Full-Stack Open-Source Humanoid Robot at IROS](https://i0.wp.com/mmx.prnasia.com/media/MS2001907/20261003074659EDT_image_1.jpg?resize=260%2C140&ssl=1 "RoboParty Unveils RP1, a High-Performance Full-Stack Open-Source Humanoid Robot at IROS") ## RoboParty Unveils RP1, a High-Performance Full-Stack Open-Source Humanoid Robot at IROS From RPO and Romomo to PartyOS, RoboParty is building an open humanoid… [](https://thailandbusinessnews.net/press-release/roboparty-unveils-rp1-a-high-performance-full-stack-open-source-humanoid-robot-at-iros/) ![RoboParty Unveils RP1, a High-Performance Full-Stack Open-Source Humanoid Robot at IROS](https://i0.wp.com/mmx.prnasia.com/media/MS2001908/20261003075052EDT_image_1.jpg?resize=260%2C140&ssl=1 "RoboParty Unveils RP1, a High-Performance Full-Stack Open-Source Humanoid Robot at IROS") ## RoboParty Unveils RP1, a High-Performance Full-Stack Open-Source Humanoid Robot at IROS PITTSBURGH, Oct. 3, 2026 /PRNewswire/ — On September 28, 2026, RoboParty…