Recent investigations reveal that free applications on platforms like Samsung and LG smart TVs are covertly using these devices as part of a vast network for AI data collection. According to Include Security, these apps enroll millions of devices without user knowledge, using consent buried in complex navigation menus.
Understanding the Proxy Network
The mechanism behind this exploit is an SDK from Bright Data, an Israeli firm boasting the largest residential proxy network globally, with over 150 million IP addresses. This software, when integrated into apps on connected TVs or mobile devices, reroutes web traffic through users’ home networks for data scraping purposes.
Researcher Buchodi highlights that connected TVs are particularly vulnerable, as they remain constantly connected to Wi-Fi, are often unattended, and experience minimal corporate oversight. This makes them ideal targets compared to smartphones.
Impact on Smart TV Users
The SDK’s settings allow these devices to function as traffic relays even when users are active, with monthly data usage capped at 200 GB. The SDK configuration, accessible via a public endpoint, exposes a list of partner apps including major platforms like PlayWorks Digital, CloudTV, and Viber Media.
This system establishes a persistent connection to proxy servers, utilizing legacy infrastructure that can be tracked by monitoring specific network traffic to luminatinet.com domains, despite bypassing typical security layers.
Protective Measures and Recommendations
To mitigate risks, users are advised to block DNS hostnames such as proxyjs.brdtnet.com at their routers. Enterprise administrators should also monitor for specific binary symbols in applications to detect affected software.
Include Security attempted to contact Bright Data in May 2026 regarding these findings, but no response was received before the publication of their report. Users concerned about privacy can take proactive steps to secure their networks against such unauthorized data usage.
Stay updated on developments in tech and cybersecurity by following us on Google News, LinkedIn, and X.
