A Samsung Smart TV app featuring Pac-Man may be turning the devices into unwitting conduits for cybercriminal activity. Researchers at Mnemonic found that some apps, like the Pac-Man one, can act as residential proxies even when not in use. This allows malicious actors to route their own traffic through the TV's internet connection, masking its true origin. The vulnerability arises because of how these apps are coded, often just serving as a gateway to load web content from external sources.
How the Proxy Works
Mnemonic discovered that the app could route traffic through users’ internet connections after a user accepted a consent screen. In the case of the Pac-Man game, the malicious functionality was triggered by the user agreeing to a consent prompt, after which the app quietly began facilitating proxy traffic. This means users weren’t aware their devices were being used for something far beyond simple entertainment.
The specific malicious code used in the app originated from an Israeli data company named Bright Data. Mnemonic observed this code scraping LinkedIn profiles and gathering data, likely for artificial intelligence training purposes. This misuse of residential internet connections allows cybercriminals to appear as legitimate users, making it harder for security systems to detect and block suspicious activity.
Samsung's Response
Samsung confirmed it is banning such apps. 'We have already restricted new app registrations that incorporate such proxy functionalities,' a spokesperson said. The company is implementing strict policies to identify and remove these apps. They are now actively reviewing and restricting any new applications that include these types of capabilities. Developers who violate these new rules will find their apps blocked from submission or removed from the platform.
The spokesperson added that Samsung is taking a platform-wide approach to ensure security across its ecosystem. 'We are working to identify and remove all apps currently available in our store that contain these components,' the company stated. This indicates a broader effort to secure their smart TV app environment and prevent future incidents.
The issue with the Pac-Man app is not unique to Samsung. Similar problems were reported with LG smart TVs. Experts warn that smart TVs are easy targets because they do not show signs like battery drain or performance issues. Unlike mobile phones or computers, a smart TV running in the background won’t typically alert the user to unusual activity. This makes it an especially attractive target for cybercriminals. LG responded by stating it was working with app developers to eliminate residential proxy functionality and remove non-compliant apps from its platform.
To protect yourself, be cautious when downloading apps, read consent agreements carefully, and delete any apps that are not useful. The simplest steps—researching before accepting terms and regularly auditing installed apps—can go a long way in securing your devices. The growing popularity of smart TVs as entertainment hubs makes them a new frontier in the ongoing fight against cyber threats.