LG Electronics USA Announces Ban on Residential Proxy Apps From Smart TV Store After Krebs Coverage

A vendor cleans up its app store after researchers put a number on the problem — the residential-proxy pattern this week reaches the living-room television.

ENGLEWOOD CLIFFS, N.J. — LG Electronics USA on July 21-22, 2026 announced plans to suspend any apps built for its smart TVs that turn a television into an always-on residential proxy node, according to reporting by Krebs on Security. The company reportedly said the move follows research, published less than a month earlier, that found more than 42 percent of the games and other apps on LG's webOS store allowed unknown third parties to route internet traffic through a user's TV.

The announcement is a vendor-policy story first: LG is described as working with app developers to remove the residential-proxy option, with non-compliant apps to be suspended. As reported by Krebs on Security, an LG senior vice president said a residential proxy network “is not an intended use for LG smart TVs” and that the company's review of affected apps is already underway. This piece summarizes what LG announced, the research that preceded it, and what remains unconfirmed — at the consumer and policy level, not the technical mechanics of the apps themselves.

What LG Announced

According to Krebs on Security, LG Electronics USA said this week it plans to suspend any apps built for its smart TVs that turn a television into an always-on residential proxy node. A residential proxy, in consumer terms, lets an unknown third party send web requests that appear to originate from an ordinary home internet connection; an app carrying that capability uses the TV's network link to carry other people's traffic, typically without the owner understanding what has been agreed to.

LG reportedly framed the change as a matter of intended use rather than a specific security flaw. An LG senior vice president told Krebs that a residential proxy network “is not an intended use for LG smart TVs,” that the company is working with developers to remove the proxy option from apps on the webOS platform, and that developers who fail to comply will find their apps suspended. The review of affected apps is reportedly “well underway.” The CyberSignal is reporting the vendor's stated plan; the pace and completeness of enforcement are things that will only be visible over time.

The Researcher Findings and the 42% Figure

The announcement did not arrive in a vacuum. It reportedly came less than a month after researchers at the security firm Spur published an analysis of how common residential-proxy code has become inside smart-TV apps. Per the research as summarized in reporting, a scan of thousands of apps across LG's webOS and Samsung's Tizen platforms found that a large share carried residential-proxy software — and that on LG's webOS store specifically, more than 42 percent of the games and other apps examined allowed unknown third parties to route traffic through a user's television.

That figure is the reason the story travels. A residential-proxy option buried in one obscure app is a curiosity; the same option present in roughly two of every five apps on a mainstream smart-TV store is a structural consumer-security problem. The CyberSignal is attributing the 42 percent figure to the underlying research and its reporting rather than asserting it independently, and notes that the exact methodology, app sample, and any platform-by-platform differences sit with the researchers. The defender-relevant takeaway is the order of magnitude: this is a default-adjacent behavior on a device class most households never think to audit.

A Widening Residential-Proxy Beat

LG's move slots into a pattern The CyberSignal has been tracking across the year: residential proxying moving from a niche abuse into a named, addressed problem. Earlier coverage documented how a widely used SDK could turn always-on smart TVs into exit nodes for large-scale web scraping — the same device-class exposure LG is now responding to at the app-store level. The enforcement side of the beat has been active too, from Google's continued disruption of malicious residential-proxy networks to the FBI and Google's takedown of the NetNut proxy platform reportedly spanning two million devices.

What makes the LG announcement distinct is where the intervention sits. Law-enforcement and vendor takedowns — including the Dutch dismantling of the Asocks proxy network built from millions of consumer devices — act on the networks after they exist. LG is acting at the distribution layer, on the store that lets the proxy-enabled apps reach televisions in the first place. Curating the app catalog is a different lever than dismantling a botnet, and if it holds it addresses supply rather than cleanup.

Consumer-Security Implications

For the ordinary TV owner, the practical concern is not exotic. A television quietly carrying strangers' web traffic consumes household bandwidth, can associate a home's IP address with activity the owner never performed, and does all of it on a device few people think of as a computer that needs auditing. That last point is what makes smart TVs attractive proxy hosts in the first place: they sit on the same home network as everything else, stay powered for long stretches, and rarely get the scrutiny a laptop or phone would.

LG's app-store cleanup, if carried through, reduces the number of televisions that can be enrolled this way without the owner having to do anything. That is a meaningful shift, because the burden of noticing a proxy-enabled app has always fallen on consumers least equipped to spot it. The CyberSignal frames this as a consumer-security win at the policy level while noting the limits: a single vendor's store is one catalog among several, and the change addresses new and updated apps rather than guaranteeing anything about televisions already in living rooms.

Open Questions

Several specifics are unresolved at publication, and The CyberSignal is not filling them in. The timeline for full removal of proxy-enabled apps from the webOS store is not established; LG reportedly describes its review as underway rather than complete. It is not confirmed whether other smart-TV platform operators — among them Samsung's Tizen and Google TV — will take similar action, even though the underlying research reportedly examined more than one platform. And it is not confirmed whether owners of TVs that already ran proxy-enabled apps will be notified.

The broader caveat is that a store policy is only as strong as its enforcement. The value of LG's announcement will be measured by how many apps are actually changed or suspended, how quickly, and whether the residential-proxy option genuinely disappears rather than resurfacing under a different label. As LG follows through, as other vendors respond or stay silent, and as researchers publish follow-up measurements, the picture will sharpen. Until then this is a stated vendor commitment prompted by a striking research figure — significant, and worth watching, but not yet a finished cleanup.

The CyberSignal Analysis

The reported facts above come from LG's announcement and the reporting around it; what follows is The CyberSignal's editorial reading. None of the judgments below are new reported facts.

Signal 01 — The Store Is the Right Place to Intervene

Most residential-proxy news is about cleanup after the fact — disrupting a network, seizing servers, notifying victims. Our reading is that LG's move matters because it acts one step upstream, at the app store that distributes the capability. Curating the catalog is a supply-side lever: it shrinks the pool of televisions that can be enrolled at all, rather than chasing enrollments after they happen.

That is also why the 42 percent figure did the work here. A vendor rarely rewrites store policy over an isolated app; it does so when a number reframes the issue as systemic. The lesson for defenders and researchers is that quantified prevalence, not a single proof-of-concept, is what tends to move a platform owner to act.

Signal 02 — A Consumer Win With Visible Limits

Our assessment is that this is a genuine consumer-security improvement, and that its limits are worth stating in the same breath. The change lifts the burden of vigilance off the people least able to carry it — households that would never think to audit a television. That is the right direction.

But one vendor's store is one catalog among several, the policy reaches new and updated apps more cleanly than televisions already deployed, and a store rule lives or dies on enforcement. We would read the announcement as a real step, not a solved problem, and reserve judgment on scale until removal figures and follow-up measurements appear.

Signal 03 — Watch Whether Anyone Else Follows

The detail we find most telling is what the underlying research implies but the announcement does not resolve: the proxy pattern reportedly spans more than one smart-TV platform, yet only one vendor has publicly moved. Our view is that the most informative thing to track now is the silence or response of the others — whether platforms like Samsung's Tizen and Google TV treat this as a shared problem or wait to be named.

Vendor-policy shifts tend to travel once the first mover sets a reference point. If LG's cleanup holds and draws attention, it becomes harder for peers to leave the same option in place. We would treat the next few platform responses as the real measure of whether this becomes an industry norm or stays a one-store exception.

Sources