Samsung smart TV apps expose security vulnerability
Millions of users' internet connections shared with strangers
1Security research reveals shocking findings
According to research published by Norwegian cybersecurity firm Mnemonic, some apps developed for Samsung smart TVs share users' internet connections with strangers. Among these apps is even a Pac-Man game featured in Samsung's 'Editor's Choice' section. Researchers warn that this situation exposes millions of users to cyber attack risks.
2How do proxy networks work?
The 'resproxy' software found in apps routes strangers' traffic through users' internet connections like a tunnel. This allows attackers to carry out cyber attacks through normal home internet connections. Researchers emphasize that such proxy networks are increasingly linked to cybercrime.
3What was Samsung's response?
Following TechCrunch's inquiries, Samsung announced it has banned apps that share users' internet connections. The company stated it has restricted proxy features in new app registrations and is working to remove existing problematic apps. This decision came after LG took similar action last month.
4How is app content hidden?
The research shows risky apps are often simple shells containing just a few lines of code. Since these apps load content from another server, reviews can only see these few lines. Mnemonic's Harrison Sand warned, 'What was reviewed isn't necessarily what's running,' highlighting the severity of the situation.
5Are there legal uses for proxy networks?
Proxy networks aren't technically illegal. Some users utilize them to bypass censorship. AI companies also leverage these networks for data collection. However, cybersecurity experts warn proxy networks are increasingly being used for cyber attacks and data breaches.
6What methodology did researchers use?
The Mnemonic team rooted a Samsung smart TV's software to gain deep access to its internal workings. By analyzing all incoming and outgoing traffic, they identified which apps were sharing internet connections. They found proxy code from Israel-based Bright Data in the Pac-Man game.
7What role does Bright Data play?
Bright Data provides proxy networks covering millions of home networks worldwide. The company also operates a marketplace selling scraped datasets. Researchers noted Bright Data's code activates after user consent but warned that a simple server change could potentially turn millions of TVs into botnets.
8What should users do?
Experts recommend Samsung smart TV users immediately remove suspicious apps, particularly those in seemingly trustworthy sections like 'Editor's Choice.' Users should carefully review app permission requests and deny unnecessary access demands to protect their devices and data.
Original article: cybersecurity | TechCrunch — Samsung akıllı TV uygulamalarında güvenlik açığı