[pifm_guy]

I'd like to see what this malware actually does.

I don't really care if there is malware running in my living room. Makes no difference to me if it runs there or at the north pole. It isn't exactly wasting much of my power or network with a tiny allwinner CPU and probably only 54Mbit WiFi.

And as long as this thing keeps steaming TV, I'm quite happy for it to be full of malware.

[nine_k]

Such malware may sit dormant until ordered to be a small part of a DDoS attack. It will continue stream your TV in the meantime.

Harboring such a pest, typically used in extortion, is just not nice, even if you personally do not directly feel any ill effects.

[nibbleshifter]

Or acts as a proxy allowing people to route all kinda of shit through (or into) your network...

A lot of those "residential proxy services" work by routing traffic through infected devices. The operators of them just buy "installs" (dirt cheap) from botnet operators, etc.

An infected device on the home network can also be staging for (automated) attacks against other shit on your network. Fun times.

[vagrantJin]

> An infected device on the home network can also be staging for (automated) attacks against other shit on your network. Fun times

Oh? With what result at the end of all that?

Otherwise this reads like typical "infosec" fearmongering turned up to 11. No different than doomsday preppers.

[nine_k]

Your windows machine likely have more lax permissions for the internal LAN. It's easier to try and install a keylogger, and steal your passwords on various sites, card numbers, etc.

This all gets bought and sold on black markets, and gets used weeks and months after being stolen. Spam sent covertly from your mail account, mystery charges on your CC, etc. Not pleasant. At the worst case, a full identity theft, then behold a $30k loan taken in your name, for you to repay with interest.

[vagrantJin]

Windows machine? Others are bulletproof? Mac has never been used as an attack vector by a malicious actor?

What if a super-volcano erupts tomorrow, do you have enough canned beans?

[cpv]

And if someone doubts this, remember the Mirai botnet.

[sillystuff]

An Internet connected device with a back-door could be used as a jumping off point to attack other systems on your network.

An Internet connected fishtank thermometer was the initial point of entry for attackers against a casino:

https://www.businessinsider.com/hackers-stole-a-casinos-data...

Without paywall: https://archive.ph/K1nPe

[happyopossum]

> as long as this thing keeps steaming TV

Using your accounts presumably - so at the very least this thing has access to your hulu/netfliux/hbo/disney+ account information... That alone should be enough to make one reconsider.

[Buffout]

You asked a good question.

Q: What this malware does?

A: probably nothing , but You kind of gave keys to Your device to 3rd party. And 2nd party (that also has keys ) doesn't like that.

Ideally You the owner should have the key and nobody else.

[DesktopECHO]

I'm not going to try and change your mind, just sayin' that seems like a really bad idea.