{"id":"01M6MYDMMQE4AZXHKK6BDN70QR","slug":"t95","vendor":null,"oem":"AllWinner / Rockchip white-label","model":"T95","hw_revision":null,"category":"tv_box","country_of_origin":"CN","description":"Unbranded Android TV box sold on Amazon, AliExpress and others. Shipped with firmware-level malware (BADBOX / 'Peachpit' ad fraud) that contacts a command server at first boot.","status":"confirmed","status_reason":"BADBOX firmware malware documented by HUMAN Security (2023) and the FBI (2025)","status_at":1793853866196,"status_manual":1,"report_count":1,"verified_count":1,"created_by":"01M6MYDMJ4H4JTJ0TK8JWT1E1B","created_at":1793851839127,"updated_at":1793853866196,"url":"https://isitspying.com/p/t95","badge":"https://isitspying.com/badge/t95.svg","identifiers":[{"kind":"model_number","value":"T95","product_id":"01M6MYDMMQE4AZXHKK6BDN70QR","confidence":1,"source":"seed","created_at":1793851839247}],"findings":[{"kind":"contacts_unknown_host","severity":"high","n":1,"verified_n":1},{"kind":"preinstalled_malware","severity":"critical","n":1,"verified_n":1}],"contacted_hosts":[],"reports":[{"id":"01M6MYDN039XMGEWHX7ZYJJ5FS","url":"https://isitspying.com/r/01M6MYDN039XMGEWHX7ZYJJ5FS","status":"verified","verdict":"malicious","summary":"Firmware contains BADBOX malware; contacts C2 infrastructure on first boot and installs ad-fraud modules","method":"firmware_dump","channel":"api","handle":"isitspying","created_at":1793851839491}],"responses":[],"sources":[{"id":"01M6MYDMXNWCMDAMKY3WW7Y519","product_id":"01M6MYDMMQE4AZXHKK6BDN70QR","report_id":null,"title":"FBI PSA: Home internet-connected devices facilitate criminal activity (BADBOX 2.0)","url":"https://www.ic3.gov/PSA/2025/PSA250605","publisher":"FBI IC3","published_at":"2025-06-05","created_at":1793851839413},{"id":"01M6MYDMV16PFFCQBTVWJ1X8Y8","product_id":"01M6MYDMMQE4AZXHKK6BDN70QR","report_id":null,"title":"BADBOX: Peachpit and the fraudulent operation that exploits consumer devices","url":"https://www.humansecurity.com/learn/blog/badbox-peachpit-and-the-fraudulent-operation-that-exploits-consumer-devices","publisher":"HUMAN Security","published_at":"2023-10-04","created_at":1793851839329}]}