Blog

Dangers of Super Boxes

Please review the information below to understand why TrioTel strongly encourages customers to think carefully about how they access TV and streaming content. Connecting a SuperBox to your home network is like adding a device you don’t fully control—it can run in the background without your knowledge, with little visibility into what it’s doing and no easy way to stop it.

For these reasons, TrioTel strongly discourages the use of SuperBoxes and similar IPTV streaming devices…

Last week, TrioTel team members attended a workshop hosted by the South Dakota Telecommunications Association. During the session, SDN Communications, in partnership with Dakota State University, presented testing results on SuperBoxes and the negative impact they can have on network performance.

This initiative began with security concerns identified by SDN’s technical team and has since expanded into a broader effort involving research, industry collaboration, and independent academic analysis.

The presentation highlighted that these devices are often preloaded with malware, which can lead to cyberattacks, copyright violations, and network security breaches. In November 2025, Jake VanDewater, Vice President of Engineering, Operations, and IT at SDN, initiated discussions with Ashley Podhradsky, Vice President for Research and Economic Development at Dakota State University, to engage DSU’s Digital Forensics for Cyber Enforcement Lab in further analysis.

According to Dakota State, the SuperBox is not simply a piracy device. It operates as a remotely controlled platform capable of silently installing or removing applications without the owner’s knowledge or consent—and can be disabled at any time by the manufacturer. In addition, the device may use a customer’s internet connection to upload copyrighted content to other users without their awareness. All applications run with unrestricted root access, and external research indicates the hardware lacks basic security protections against tampering.

To support the investigation, SDN purchased multiple SuperBox devices through online resellers and provided them to DSU for controlled, independent testing. DSU has since released an initial report outlining notable key findings:

• Silent remote installation and removal of applications
  Apps can be added or deleted without user knowledge or consent
• Known malware campaigns targeting similar devices
  Research shows widespread attacks on this category of Android-based streaming devices
• Unauthorized use of customer internet bandwidth
  Devices may redistribute pirated content using the customer’s connection
• Built-in remote “kill switch”
  Devices can be disabled remotely by the manufacturer or controlling system
• Pre-rooted operating system
  Full administrative access is granted to all applications and users
• Unprotected hardware debug interface
  Lack of safeguards increases the risk of exploitation

These findings align with broader security concerns surrounding low-cost Android streaming devices. The FBI (Federal Bureau of Investigation) issued a public service announcement in June 2025 warning consumers about this category, and researchers have identified more than one million compromised devices worldwide.

If you have any questions or concerns about SuperBoxes, TrioTel is always here to help. Give us a call at 605-425-2238 and a TrioTel representative will walk you through your options and recommend safer, more reliable ways to stream your favorite content.