Imagine buying a new phone, signing in with your Apple ID or Google account, and discovering that all your saved passwords, payment cards, and even your passkeys are already there.

The Popa botnet reportedly turns millions of cheap Android TV boxes into residential proxies, routing strangers' traffic ...