Spur released their report today on some data referenced in our story last week about the Popa botnet's connection to the publicly-traded Israeli firm Alarum Technologies/NetNut.
tl;dr: Everyone worries about the apps on their phone. Almost no one looks at the ones on their TV. We scanned 6,038 of them across LG and Samsung; 2,058 were selling your IP address.
https://spur.us/blog/smart-tv-apps-residential-proxy-sdks
BrianKrebs
npub1vc…0axsh
2026-06-23 12:14:50 UTC
in reply to nevent1q…as9h
Author Public Key
npub1vc39pnjdqd77zzdxff4qyv8h3x0ey2mkx33c3vl8egr0a9ysxkxsk0axshSeen on
wss://relay.momostr.pinkPublished at
2026-06-23 12:14:50 UTCEvent JSON
{
"id": "b5d69223bf8ff0977da4c717a7e6b2438cd1eca5e1a623698075e80f553ee294",
"pubkey": "662250ce4d037de109a64a6a0230f7899f922b76346388b3e7ca06fe9490358d",
"created_at": 1782216890,
"kind": 1,
"tags": [
[
"e",
"fd400c84f66fbcc229e948b35fe9bf2d6d92e23c11deceff586551bbb41bf096",
"",
"root",
"662250ce4d037de109a64a6a0230f7899f922b76346388b3e7ca06fe9490358d"
],
[
"p",
"662250ce4d037de109a64a6a0230f7899f922b76346388b3e7ca06fe9490358d"
],
[
"proxy",
"https://infosec.exchange/@briankrebs/116799366151008763",
"web"
],
[
"proxy",
"https://infosec.exchange/users/briankrebs/statuses/116799366151008763",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://infosec.exchange/users/briankrebs/statuses/116799366151008763",
"pink.momostr"
],
[
"-"
]
],
"content": "Spur released their report today on some data referenced in our story last week about the Popa botnet's connection to the publicly-traded Israeli firm Alarum Technologies/NetNut.\n\ntl;dr: Everyone worries about the apps on their phone. Almost no one looks at the ones on their TV. We scanned 6,038 of them across LG and Samsung; 2,058 were selling your IP address.\n\nhttps://spur.us/blog/smart-tv-apps-residential-proxy-sdks",
"sig": "06c2024236cbb0a0f6fd973b4e9ef0fae80550899dc4b5aa34e566ceaca981467de0c11ae8470976102066ba2d711c240fe52008553c023bf2e30d2878aa96b6"
}