Android malware infects Amazon TV devices

Amazon Fire TV and their smaller counterpart the Fire TV Stick are well known and for a lot of people also beloved tools to use at home in order to watch a nice movie in the evening. While most people only utilize it to stream the occasional Amazon flick, others are craftier. They install whole home entertainment centers like Kodi and connect them with their media server to get the most out of their device.

But beware: It has been discovered that those altered sticks are vulnerable to a mean Android cryptocurrency mining worm.

What’s this cryptocurrency mining worm about?

The malware – a variant of the ADB.Miner worm which was discovered earlier this year in March – installs itself as an app called “Test” and starts mining away for Monero immediately. People on the XDA Developers forum began noticing it because of a white notification window that kept popping up.

Other signs that cryptocurrency is being mined on a device is that it becomes slow as well as unreactive and movies stutter or stop while being played back.

How does the infection spread?

In order to get all the “cool apps” like Kodi on an Amazon device one normally has to allow ADB debugging and/or apps from unknown sources – both practices that make the device more vulnerable. This is also what enables ADB.Miner to spread: The botnet scans for the port that opens up when enabling the above options and well, makes itself at home once it finds a suitable Amazon TV device.