Work & Technology Correspondent

Irish consumers are being warned that a range of devices including so-called TV "dodgy boxes" could have been compromised by a major global cyberattack.

According to consultants Grant Thornton Ireland, the attack was launched by a botnet known as Kimwolf, made up predominantly of compromised Android-enabled televisions and TV streaming devices.

Security researchers have warned that millions of low-cost, poorly secured devices around the world could be infected and remotely controlled by cybercriminals.

The risk extends beyond TV devices, with low-cost Internet of Things (IoT) gadgets increasingly being used in Irish households, many with minimal security.

The public is being advised to take some basic steps such as changing default passwords on all smart devices and routers, as well as only purchasing reputable brands from legitimate vendors.

"Many people don't realise that a low-cost Android TV box in their sitting room or a cheap smart lightbulb can be compromised in seconds," said Howard Shortt, Cybersecurity Partner at Grant Thornton Ireland.

"Once attackers gain access, they can use that device as part of a botnet or quietly profile the household to support more targeted and convincing phishing attacks," he said.

"Attackers typically exploit default passwords, outdated software, or unpatched vulnerabilities in internet-connected devices and once inside a home network, can observe traffic patterns and build a profile of the household."

"That information allows criminals to engineer highly believable phishing messages. For example, posing as a streaming provider with a prompt to review a show you have just watched," Mr Shortt said.

Work & Technology Correspondent