Work From Home Security: Is a Cheap Streaming Box Putting Your Business at Risk?

Work from home has become a normal part of business life. It gives staff flexibility, helps with productivity, and can be a great option for many workplaces. But it also creates a hidden risk that many business owners do not think about: your business network may only be as safe as the home networks your staff are working from.

A recent example is the BadBox 2.0 botnet, where Google reported that more than 10 million uncertified Android-based devices were compromised. These included cheap streaming boxes, smart TV devices and similar internet-connected products, often running versions of Android without Google’s usual security protections. Some devices were reportedly shipped with malware already installed, while others became infected through unofficial apps.

For a household, that is worrying enough. For a business owner, the bigger concern is what happens when a staff member uses a work laptop on the same home network as one of these compromised devices. This is one of the bigger work from home security risks in 2026.

Where did these devices come from?

Many of these devices are sold as cheap Android TV boxes, streaming boxes or “fully loaded” media players. They are often advertised online, in marketplaces, through social media, or by word of mouth as an easy way to watch movies, sport, TV shows and live streams without paying for the proper services.

For the person buying one, the appeal is obvious: just plug it into the TV, and you instantly have access to movies, TV Shows, live sports, pretty much anything you can think of. Your average consumer doesn’t stop and think, why would someone offer me a device that gets me hundreds or even thousands of dollars of media for free?

That is where the danger starts. A device bought to pirate movies or online streams may not just be breaking copyright rules. It might actually be a device designed to be used by online hackers and criminal groups, and by installing it, you’ve just setup your home network to be part of their criminal network.

What these devices can do

Once a compromised device is connected to a home network, the device can do a vast range of things you really don’t want happening on yoru home network. The criminals can route their own traffic through your home, so when they launch attacks, those attacks origination from your house. All kinds of fraudulent and criminal activity can be engaged in, and the police are going to come knocking on the home owners door first.

These kinds of devices might seem like a harmless way to watch your favourite TV shows, but in the background it could be helping criminals disguise where their activity is coming from. If that same home network is also used for work, the risk is no longer just personal. It can become a business cyber security issue.

Why this matters for work-from-home staff

The problem gets worse when the person with the device works for you, and works from their home; Now, they are connecting your equipment, your cloud services, your files and data, to their network, and on their network is a little hacker with complete access to everything on the network.

It would be all too easy in most cases for attacker controlling the streaming device to find your business laptop, snoop on the traffic coming and going to it and potentially even break into it and gain access directly to your business resources.

If you have staff working from home, you need to take this kind of risk seriously, and put measures in place to protect yourself.

How business owners can reduce the risk

• Use business-managed devices. Staff should use company-managed laptops or desktops wherever possible, not personal devices shared with the household.
• Require multi-factor authentication. MFA helps protect business accounts even if a password is stolen or guessed.
• Keep devices patched. Operating systems, browsers, security tools and business applications should be kept up to date.
• Use endpoint security. A proper business-grade security solution can help detect malicious activity on staff devices.
• Control access to business data. Staff should only have access to the files and systems they actually need.
• Consider VPN or conditional access policies. Depending on the business, access can be limited to compliant devices, trusted locations or approved sign-in conditions.
• Educate staff about risky home devices. Cheap streaming boxes, unknown smart devices and unofficial app stores can create risks that are easy to overlook.

A practical approach for small businesses

Most small businesses do not need to ban working from home. They just need to make sure it is done safely. The goal is to protect your business systems even when staff are working outside the office.

That starts with knowing which devices are used for work, making sure those devices are protected, and having clear policies around access, passwords, updates and approved applications. It also means accepting that the home environment is different from the office. There may be smart TVs, gaming consoles, security cameras, streaming boxes and other devices on the same network, and not all of them will be secure.

Need help securing remote work?

At Shift Computer Solutions, we help small businesses set up secure, practical work-from-home arrangements. From Microsoft 365 security and multi-factor authentication through to managed devices, endpoint protection and staff guidance, we can help reduce the risks without making things harder than they need to be.

If your team works from home, now is a good time to review whether your setup is properly protected. Contact Shift Computer Solutions to discuss a simple remote work security review for your business.