Her dad's streaming box sent tons of data to China. Then the FBI showed up. 📺 Ep. 172: SuperBox

Her dad's streaming box sent tons of data to China. Then the FBI showed up. 📺 Ep. 172: SuperBox

Source: YouTube · Jack Rhysider · published Apr 7, 2026 · 1:27:48

Cybersecurity
No ratings yet Log in to rate
Transcript Available
Description

Security researcher D3ada55 discovered that SuperBox streaming devices, sold on major retailer websites, actively communicate with Chinese servers, scan home networks, and were part of a massive botnet, prompting an FBI investigation 3:30.

Key Takeaways:
• SuperBox devices immediately beacon to Tencent infrastructure in China and trigger SCADA vulnerability exploits, raising serious concerns about their true purpose 3:30
• The devices aggressively scan local networks using ARP flooding to knock devices offline and impersonate them, with TeamViewer pre-installed for remote access 5:00
• After D3ada55's initial findings, federal authorities opened an investigation, and the FBI later issued a PSA warning about compromised IoT devices 8:30
• SuperBoxes were confirmed as part of the Kimwolf botnet that launched record-breaking 31 Tbps DDoS attacks using two million compromised devices 19:00

The devices use MLM-style distribution through influencers and suburban resellers to infiltrate American homes, representing a sophisticated campaign that exploits frustration with fragmented streaming services.

Sources:

  • 3:30 SuperBox communicating with China
  • 5:00 Network scanning and remote access
  • 8:30 Federal investigation details
  • 19:00 Kimwolf botnet confirmation

Generate CPE Credits

Generate a professional CPE document from this video's transcript.

Estimated credit: 1.5 CPE hours

Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.

Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.

CISSP Domain Mapping
Learning Objectives
Self-Assessment Questions
PDF Export Ready

Free account. One generation at a time, with a daily limit.

CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.

Watch on YouTube

Transcript Preview

First 800 characters of the transcript

JACK: Hey, hey, it's Jack, host of the show. 
I went to IKEA the other day to buy a lamp, and when I went in, I saw that they had a recall 
notice on the bulletin board. Their garlic press was getting recalled. They said that ten people 
got injured using it, and I think little metal bits would fall off and cut some fingers. So, they 
stopped selling it and were issuing full refunds to anyone who bought one. It made me think, hold 
on; [music] has this ever happened with computers? Like, has a store ever recalled a computer because 
it was dangerous? What does dangerous mean? There was a story that came out a few years back 
which was about a super-cheap gaming computer that was being sold on Amazon, but little did 
anyone know the computer came with malware on it. People who bought it wou…