Nearly half of scanned LG and Samsung TV apps bundle residential-proxy SDKs

Category: Security
Status: developing
Sources: spur.us, discussion
Summary: A Spur report dated 2026-06-22 says it scanned 6,038 LG and Samsung TV apps and flagged 2,058 as selling the device's IP via residential-proxy SDKs including Bright Data, Massive, and Honeygain/Oxylabs. Because the devices sit inside home networks, the report warns compromised proxy endpoints could tunnel back to local routers, NAS, printers, and cameras, citing the Kimwolf botnet; it notes Amazon and Roku prohibit such SDKs while LG and Samsung have no equivalent public policy.
Why it matters: Smart-TV proxy SDKs turn home networks into rentable exit nodes and a potential pivot into local infrastructure, a supply-chain exposure outside normal endpoint controls.
Follow-up: Watch for LG/Samsung policy statements and any named app takedowns.