Just like desktop computers, some smart TVs have a built in design flaw that’s easy to exploit.

 

Millions of smart TVs have been found to have easy-to-find security flaws that even unsophisticated hackers can exploit.

Consumer Reports tested and found that the problem affects televisions made by Samsung, as well as models made by TCL and other brands that use the Roku TV smart-TV platform. Other streaming devices such as the Roku Ultra also have the same design flaw.

With the vulnerability found in these TVs, hackers can change channels, cause offensive content to play, or even crank up the volume to unsettling levels. It doesn’t have to be someone close by, like a disgruntled neighbor; the hack can be done over the internet from thousands of miles away.

The problem was found to involve the application programming interface (API.) The API program lets developers make their own products work with the Roku platform. These devices have an unsecured remote control API enabled by design.

This isn’t a newly found issue, as this unsecured API has been discussed in online forums since as far back as 2015. Yet no changes have been made to make this vulnerability secure.

In order for your TV to be affected by a real-world attack, you would need to be using a phone or laptop that is running on the same WiFi network as your television. Then, you’d need to visit a site or download a mobile app that has a malicious code.

If you’ve read any of our previous articles on malware, you know that the chance of this happening is quite common and can be difficult to protect against. All it would take is clicking on a link in a phishing email or visiting a site that has an advertisement with the code embedded.

So, be careful with which apps you install and which links you click. As always, make sure to keep strong antivirus software installed on your computer.

If you have any concerns, give us a call here at RHYNO Networks and we’ll help you make sure that your system is secure. (855) 749-6648

 

https://rhynonetworks.com/antivirus-101-why-we-use-eset-and-think-that-you-should-too/

https://rhynonetworks.com/how-to-free-yourself-from-webpages-with-circular-pop-ups/