Your living room television may have been quietly routing strangers’ internet traffic without your knowledge. According to a KrebsOnSecurity investigation, LG is moving to ban residential proxy applications from its Smart TV app ecosystem after it was revealed that certain apps available through the platform were enrolling users’ televisions as nodes in commercial proxy networks — selling their bandwidth and IP addresses to third parties, often without clear disclosure to the device owner.
The move is a significant policy shift for LG’s webOS platform, which powers tens of millions of Smart TVs worldwide. Residential proxies are particularly valuable to bad actors and gray-market operators because traffic routed through them appears to originate from real consumer devices on home internet connections — making it far harder for websites and fraud-detection systems to flag. That’s a different threat profile from the kind of enterprise network abuse covered in stories like the N-able N-central breach, but the underlying exploitation logic is strikingly similar: quietly compromise infrastructure that owners trust and assume is clean.
How Televisions Became Proxy Infrastructure
Residential proxy networks work by recruiting devices — phones, routers, smart home hardware, and increasingly, Smart TVs — to relay traffic on behalf of paying customers. The operators of these networks often embed proxy functionality inside apps that appear to offer legitimate services: media players, VPN utilities, or streaming aggregators. Once installed, the app silently runs in the background, using the device’s IP address as an exit node. The device owner sees no meaningful indication this is happening, and their home IP becomes a commodity sold by the megabyte.
Smart TVs are an attractive target for this kind of abuse. They tend to stay powered on or in standby for long stretches, they sit on residential broadband connections with relatively high bandwidth allocations, and their app ecosystems have historically received less rigorous security scrutiny than mobile platforms like iOS or Android. LG’s webOS, like competing platforms from Samsung and Roku, allows third-party app developers to publish software through a managed storefront — but the review process has not always caught proxy-enrollment behavior, which can be deliberately obfuscated in the app’s code.
LG’s Policy Response and What It Actually Requires
LG’s forthcoming ban will prohibit apps that use the TV’s network connection to proxy third-party traffic, according to KrebsOnSecurity’s reporting. The policy targets a growing cottage industry: companies that market residential proxy capacity to clients ranging from web scrapers and ad-verification firms to, at the darker end of the market, credential-stuffing operations and fraud rings. Banning the app category at the platform level is a more direct intervention than relying on individual app reviews, though enforcement will depend on how well LG can technically detect proxy behavior at submission time — a challenge that has bedeviled mobile app stores for years.
The practical impact will hinge on implementation. Proxy-enabling code can be disguised or delivered via post-install updates, a technique that routinely sidesteps initial app store reviews. LG has not publicly detailed the technical mechanisms it will use to detect and remove non-compliant apps already installed on devices in the field, nor whether existing installations will be remotely revoked. Those gaps matter enormously — a policy that only governs new submissions leaves millions of existing TVs potentially still enrolled in proxy networks they never knowingly joined.
The broader industry implication is hard to ignore. If LG’s ban proves effective, it increases pressure on Samsung, Roku, Amazon, and Google to audit their own Smart TV and streaming-device ecosystems for similar abuse. As the attack surface for residential proxy recruitment expands beyond phones and routers into connected home appliances, platform-level enforcement becomes one of the few realistic choke points. The question is whether TV manufacturers will treat this as a security priority or wait until regulators make the decision for them — a pattern that has repeated itself across nearly every consumer device category to enter the connected home.
