An investigation conducted by Gamers Nexus revealed that LG smart TVs scan local networks to map out phones and nearby devices. Tests also demonstrated the devices’ ability to record audio from the microphone while the screen is off and then send the collected data once an internet connection is reestablished.

According to a new 135-minute video released by Gamers Nexus (see below), LG smart TVs continuously scan home networks, map connected devices, and record audio from the microphone even when they are in standby mode and appear to be turned off.

Looking at the situation in more detail, Steve collaborated with Level1Techs and independent cybersecurity experts. Together, they tested LG’s retail OLED models, including the G5. Intercepting network packets using Wireshark revealed that the TVs actively scan the local network to detect third-party devices, including smartphones and smartwatches. In addition to internal IP addresses, the devices collected the names and signal strengths of nearby Wi-Fi networks, as well as geolocation data.

This vast amount of collected data is transmitted to LG Ad Solutions – the company’s advertising division responsible for targeting. LG claims to have sold approximately 216 million smart TVs worldwide. On the other hand, according to the advertising department itself, it has access to 363 million additional potential devices in the U.S. alone by tracking other devices on the same network. The devices also feature an Automated Content Recognition (ACR) system. It converts audio and video clips from the screen into digital fingerprints to record the content viewed by users, regardless of the signal source. Although ACR technology has been described in detail before, recent investigations show that the collection of information extends far beyond its scope.

During laboratory tests, researchers discovered that the TV was capable of high-quality audio recording via the microphone even when the screen was off (or at least appeared to be powered down) in standby mode. When the team disconnected the device from the Ethernet cable, it continued to store voice data in its internal memory and uploaded the accumulated files immediately after reconnecting to the network.

In addition, experts documented vulnerabilities in webOS that allow for remote code execution and are currently undergoing the responsible disclosure process. Given that the TV uses broad network listeners and continuously collects data immediately after unboxing, experts have issued a direct recommendation: completely disconnect LG devices from the internet and use external media players instead.

A Secret Spy in the Living Room: LG Smart TVs Are Watching Your Home

New comments