Android users are being advised to monitor their home networks: According to a new FBI warning, more than one million of the company’s devices — including smart TVs, streaming boxes, tablets and more — have been hijacked by cybercriminal malware.

“Cyber criminals gain unauthorized access to home networks by either configuring the product with malicious software prior to the user’s purchase or infecting the device as it downloads required applications… usually during the set-up process,” notes a warning published on the FBI’s Internet Crime Complaint Center.

The FBI report details a global operation called BADBOX 2.0, a malware push that allows devices to be controlled remotely without the owners’ knowledge, opening the door for things such as TV streaming devices, digital projectors, digital picture frames and other devices to be used to “facilitate criminal activity.”

Once compromised, the devices become part of a larger BADBOX 2.0 network that can be used for a variety of criminal activities, including selling access to compromised home networks.

The FBI urged people to consider disconnecting suspicious devices from their networks. They should also be on alert for signs of BADBOX 2.0 activity, including:

• Being directed to suspicious marketplaces to download apps;
• Requiring Google Play Protect settings to be disabled;
• Generic TV streaming devices that are advertised as unlocked or capable of accessing free content;
• Devices sold under unrecognizable brand names;
• Android devices that are not Play Protect certified;
• Unexplained or suspicious internet activity.

To protect yourself, the FBI recommends

• Monitoring internet traffic on home networks, including on any connected devices;
• Don’t download apps from unofficial marketplaces advertising free streaming content;
• Keep all operating systems, software and firmware up to date.