Message from the CEO

Last January, we shared a warning from the FBI about low-cost Android TV streaming boxes sold online under unfamiliar brand names. Once connected to your home network, these devices allow hackers to use your internet connection for criminal activity without your knowledge.

In the months since, we have learned more about these risks. I want to explain what they mean for our members and share an important change in how BEK will handle these devices on our network.

What has changed since January

The problem is bigger than first reported. In a lawsuit filed in federal court, Google reported that BadBox 2.0 had infected more than 10 million devices worldwide, including TV streaming boxes, tablets, projectors, and aftermarket vehicle entertainment systems. The court ordered the operators, believed to be based in China, to stop their activity and directed internet providers to help shut down the network’s infrastructure.

BadBox is no longer the only threat. Researchers also identified Kimwolf, a botnet of infected devices, which had taken over more than 2 million devices. About two-thirds of them were unofficial Android TV boxes, and many arrived from the factory with hidden software already installed. The infected boxes have been used to launch attacks on websites and to quietly sell access to the owner’s home internet connection.

While some of these devices sell for $30 to $50, popular models, such as SuperBox and vSeeBox, often cost $300 or more. A higher price does not mean the programming on the box is licensed or legal.

Why this matters for BEK’s network

Many of these boxes are built and marketed to stream live TV channels, sports, and movies without permission from the companies that own that programming. Providing that programming without authorization can violate copyright law. Federal law, including the Digital Millennium Copyright Act (DMCA), also places clear obligations on internet providers, like BEK.

To maintain the DMCA’s legal protections for internet providers, BEK must meet its requirements. These include adopting and reasonably implementing a policy to terminate repeat infringers in appropriate circumstances.

Here is what BEK’s policy means for our members: If the DMCA or BEK becomes aware that one of these boxes is being used on your internet connection, we will contact you and ask that the device be removed from our network. If the device remains connected, BEK will disconnect your internet service until the device is removed.

We understand that many members bought these boxes in good faith, often because a friend recommended one or it was advertised as an easy way to save money. Our goal is to protect your home network and the cooperative you own so BEK can continue providing reliable service to every member and the communities we serve..

Signs a device may be a problem

The warning signs the FBI shared last year still apply. Be cautious of any streaming device that:

• Comes from a brand you don’t recognize
• Uses an unofficial or third-party app store
• Asks you to turn off Google Play Protect, or is not Google Play Protect certified
• Promises free or nearly free access to premium channels, live sports, or new movies

What you can do

If you have one of these boxes, the safest step is to unplug it and stop using it. Replacing it with a device from a well-known brand, such as Roku, Amazon Fire TV, Apple TV, or Google TV Streamer can provide security updates and access to legitimate apps, including BEK’s own streaming options. Keep all your connected devices updated, and periodically check which devices are connected to your home network.

We’re here to help

High-speed fiber gives our members a powerful connection, and we want to help you keep the devices on it safe. If you’re not sure about a device in your home, please call us at 701-475-2361. As your cooperative, we’re guided by a simple commitment: to serve our members, strengthen our communities, and look out for one another.