Pac-Man App on Samsung Smart TVs Poses Security Risk
The Pac-Man app can misuse users' internet connections, posing a security threat.
1Security Vulnerability in Pac-Man App
A security vulnerability has been discovered in the Pac-Man app on Samsung smart TVs. Cybersecurity firm Mnemonic found that the app can turn TVs into a 'residential proxy' network. This allows malicious actors to route their traffic through users' internet connections. The app doesn't even need to be active for this to happen.
2How It Works
The malicious code in the Pac-Man app is activated when users accept a consent screen. The code runs in the background until the app is deleted. The code was provided by Israel-based data company Bright Data. Mnemonic reported that the code scrapes LinkedIn profiles and collects data for AI training.
3Samsung's Response
Samsung announced to TechCrunch that it has banned such apps. The company has restricted new app registrations with proxy functionality on its smart TV platform and is working to remove existing apps. Samsung also implemented strict developer policies banning residential proxy SDKs.
4Similar Issue with LG
Last month, KrebsOnSecurity revealed a similar issue with LG smart TVs. LG stated it is working with developers to remove the residential proxy option and will remove non-compliant apps. This highlights the widespread nature of security vulnerabilities in smart TVs.
5Why Smart TVs Are Targets
Residential proxy networks can be installed on other devices like phones, but smart TVs are particularly vulnerable. Unlike phones, TVs don't show signs like battery drain or errors, allowing malicious apps to remain undetected for long periods.
6Risks for Users
This vulnerability can lead to personal data leaks and misuse of internet connections. Malicious actors could use users' IP addresses for illegal activities, potentially implicating users in legal issues.
7Preventive Measures
Users should be cautious when installing apps on smart TVs and read consent screens carefully. Unused or unnecessary apps should be deleted immediately. Avoid downloading apps from untrusted sources. Keeping up with security updates from manufacturers like Samsung and LG is also crucial.
8Broader Implications
This incident underscores the serious consequences of security flaws in smart devices. Manufacturers need stricter oversight of app store content. User awareness and enhanced security measures will play a key role in preventing similar attacks.