Security experts have warned that more than thousands of LG smart TVs worldwide could be susceptible to hacks due to a vulnerability in the tech company’s web-based TV operating system. Researchers at Bitdefender found a bug in the LG tellies that could potentially let attackers bypass the normal authorisation process and gain remote access to them, letting criminals take control of your TV and create new user profiles.
It is possible for hackers to exploit a bug in the LG ThinQ app, an app that LG TV owners can use to control their television. A PIN code displayed on the TV usually needs to be typed into the app to gain access to the TV, but the bug means a hacker can skip the PIN entry and create a new user profile to hop into the operating system.
The bug affects LG TVs running webOS version 4 to version 7. Though hackers will be unlikely to be able to access your TV unless they are connected to the same Wi-Fi network, Bitdefender reported that more than 91,000 TVs could be accessed remotely over the internet.
Bitdefender says it informed LG of the vulnerabilities in November 2023, LG only released the security updates for customers to download on 22 March of this year.
To ensure you don’t fall victim to this hacking loophole, make sure to check your LG TV today and install any software updates that might have been downloaded. Smart TVs require an internet connection for you to stream your subscription services such as Netflix – if yours is online you should be able to check for a software update in the TV’s settings menu using your remote control.
TV hacks remain rare but it’s best to be vigilant when it comes to connected devices. Though hacks are more common on our smartphones or laptops, TVs increasingly contain more personal information thanks to the rise of streaming services.
Apps such as Netflix, Disney+, and Amazon Prime Video require personal login and password details, and these services are also paid for and connected to our credit card details. It doesn’t sound like any payment information can be accessed in this particular LG TV bug, but it’s worth keeping an eye out for odd activity on your TV given the private data we give to tech companies these days – hackers might be able to gain access.
Criminals could also look to install malicious software onto devices in hacks to help extract personal information or log your keystrokes to find out your passwords. That’s why it’s recommended not to reuse the same username and password for all your services, as if one of your passwords leaks but you use it for everything, hackers can theoretically then access your accounts across multiple services.
