Millions of LG TVs allegedly keep gathering data even when turned off: Report

LG smart TVs are currently facing scrutiny after researchers found that some models could scan devices on a home network and capture microphone audio while the device is on standby. According to the reports, the TVs could detect other connected devices, gather information about nearby Wi-Fi networks, and save microphone recordings even after the internet was disconnected. Not only that, but the researchers also reported that they found security flaws in LG’s webOS that could potentially allow attackers to run code remotely. Here’s everything we know so far about the LG smart TV row and how you can stay safe.

Gamers Nexus recently posted a video on its official YouTube channel in which host Steve Burke said he had been working with Level1Techs and independent security researchers. During their testing, they examined retail LG OLED models, including the G5, and found that the devices were actively looking for other devices on the local network. These included phones, smartwatches, computers, printers, and other connected hardware.

The tests also found that the TVs could collect information such as internal IP addresses and details about nearby Wi-Fi networks, including network names and signal strength. Researchers said the TVs could also identify internal network addresses and gather other information about devices connected to the network.

Also read: Samsung India layoffs: Up to 100 executives reportedly asked to leave amid restructuring

The most shocking thing found during the testing was the involvement of the TV’s microphone. Researchers said the tested televisions captured clear audio even after the display appeared to turn off and the TV entered standby.

According to the investigation, the team also disconnected a TV from the internet during testing, but the device continued storing microphone recordings locally. Moreover, once the internet connection was restored, the locally stored recordings were uploaded to LG’s servers.

While the company provides user options to disable voice recognition on its smart TVs, the investigation noted that users may not have a hardware-level option to physically disable the microphone. Furthermore, the investigation also highlighted that content shown or played on TV can be used to understand viewing habits. 

The researchers also confirmed that they found remote code execution vulnerabilities in LG’s webOS software and reported them to LG through responsible disclosure. They further added that if exploited, such flaws could potentially give an attacker control over a television and provide access to information or a wider home network.

Also read: WhatsApp ends support for older Android phones: Check if your device is affected

How to stay safe

While LG has not officially shared anything related to the safeguards. Here are some of the general measures to stay safe:

• Make sure that you install the firmware updates regularly.
• Do check the privacy controls under Settings, Privacy & Terms, or User Agreements regularly.
• Ensure that you don’t accept every agreement without giving it a read.
• You can also use different IoT or guest networks for televisions, cameras, speakers, and other smart-home devices.
• Disable UPnP on your router unless it is genuinely needed and avoid exposing TV services directly to the internet.
• Do not connect your TV services directly to the internet. You can also turn off UPnP on your router.