When you buy a TV streaming box, there are certain things you wouldn’t expect it to do. It shouldn’t secretly be laced with malware or start communicating with servers in China when it’s powered up.

Caveat emptor: We all love a good deal, but sometimes, when pursuing them, we prove the adage, "You get what you pay for." Security researchers discovered thousands of cheap Android streaming boxes ...