Advice Request Amazon Firestick- risk of pirate streaming apps

[jetman]

I have an Amazon Firestick which I use to stream TV using legitimate apps such as iPlayer etc on home WiFi.

However, I am aware that it is possible to allow the installation of Apps from outside the Amazon App store which can show pirated content. How much of a security risk does this represent ? Would it be such a risk if the Firestick is connected to a guest network ?

I don't do this myself- but I know someone who does and I keep telling him its a risk. However, he says that because any malware would be confined to the firestick and it runs on a guest network there is little risk. He has a point, but I am not so sure.

 

[Ink]

First it is illegal.

Risk of malware including miners.
Link: ADB.Miner: More Information

Risk of attacking the router
Link: This Android-infecting Trojan malware uses your phone to attack your router | ZDNet

Amazon's FireOS is built on an unsupported versions of Android.
Link: Fire OS
Link: Amazon Fire TV

Source: Android version history

 

[Tutman]

Amazon's FireOS is built on an unsupported versions of Android.
Link: Fire OS
Link: Amazon Fire TV


Source: Android version history

I did not know that Amazon's Android OS was so full of security holes!

 

[upnorth]

Here is one good example among many what can happen and extra so with sellers/suppliers.

Undercover Cops Arrest Sellers of 'Pirate' Amazon Firesticks At Florida Flea Market * TorrentFreak

The Polk County Sheriff’s Office held a press conference a few days ago to announce the results of an undercover operation stat started months ago. Detectives busted four sellers of 'pirate' Amazon Fire Sticks, including an 88-year-old suspect. According to the police, selling jailbroken devices...

torrentfreak.com

 

[jetman]

Thanks for the replies- the person I know who is using his Fire TV for pirate streaming lives in New Zealand so well outside USA jurisdiction. However, it is still illegal and always the prospect of being caught! I must admit, I have been tempted but it’s the risk of polluting my network with malware that puts me off the most. Luckily I can afford Netflix which does everything I need. And I don’t need to worry about a knock at my door.

What interests me from a technical point of view is HOW any malware could cause problems. I note the post from Spawn about potential infection of a router, but that attack appears to rely on guessing the admin password. Even if the TV stick has been infected, it would surely have limited opportunity to do any damage if it only has access to a guest network ?

 

[roger_m]

The majority of streaming apps do not contain malware. The main reason not to use them is that's its illegal, rather than the apps being harmful.
However, there are a few apps which can track your location and some such as Mobdro which give you the option to use your device as proxy.