Plume Security Labs Exposes Hidden Proxy Network Inside SuperBox Streaming Devices that Route Potentially Harmful Traffic over Home Networks

Investigation reveals media streaming devices sold at major U.S. retailers silently tunnel third-party internet traffic, including potentially stolen credentials and enterprise security bypass operations through subscribers' home broadband connections

PALO ALTO, Calif., May 28, 2026 /PRNewswire/ -- Plume Design, Inc. ("Plume"), the global subscriber experience platform for more than 450 Internet Service Providers (ISPs) across 58 countries, today released a report that uncovers significant security concerns found in SuperBox Android streaming devices sold at major U.S. retailers, which contain dormant software that when activated converts consumers' home internet connections into nodes in a residential proxy network or SuperProxy. The proxy routes unknown third-party traffic that includes potentially stolen credentials, account takeover materials and enterprise security bypass operations through subscriber households without their knowledge or consent. The report, based on a months-long investigation, is the first in a series from Plume's Security Labs.