Science & Tech · Cybersecurity · 1 hr ago
Appsalt apps linked to proxy traffic routed through users’ devices
Apps and browser extensions from Lithuanian publisher Appsalt were found routing internet traffic through users’ devices without clear consent.
The publisher, operated by Beellet UAB, uses software that turns consumer devices into residential proxies, letting third parties route traffic through users’ internet connections.
Researchers said the Cinema HQ streaming app keeps proxy components running even when users try to disable them, and earlier Chrome extensions collected browsing history, Google search results and ChatGPT conversations.
They also found proxy code in 12 iPhone games and desktop games on Steam; silent audio files helped keep the iPhone code active in the background, contrary to Apple store guidelines.
The software development kit is linked to Honeygain, a proxy network owned by Oxylabs, which says it audits partners for consent breaches.
Users are advised to uninstall suspicious apps and check startup settings to help prevent their bandwidth from being used for unauthorized proxy traffic.
Applications and browser extensions from Lithuanian publisher Appsalt have been linked to routing internet traffic through users’ devices without clear consent.
An investigation by Spur Intelligence found that Appsalt uses a software development kit to turn consumer devices into residential proxies.
Researchers found that Cinema HQ continued running proxy components even when users tried to disable the feature.
Earlier versions of Appsalt’s Chrome extensions were found to collect browsing history, Google search results and ChatGPT conversations.
Researchers also found proxy code in 12 iPhone games and in desktop games on Steam.
- Who
- Appsalt, operated by Beellet UAB, and users of its applications and extensions.
- What
- Appsalt software was found to route third-party internet traffic through users’ devices. Earlier Chrome extension versions were also found to collect sensitive data.
- When
- The report was published on November 14, 2026.
- Where
- On users’ devices; the publisher is Lithuanian. The report also mentions iPhone games and desktop games on Steam.
- Why
- The software development kit turns consumer devices into residential proxies, allowing third parties to route web traffic through users’ internet connections.
This story does not have two clearly opposing sides.
Appsalt’s Chrome extensions were found to collect browsing history, Google search results and ChatGPT conversations.
SC Media published a report on researchers’ findings about Appsalt’s proxy activity.
- Publisher
- Appsalt, operated by Beellet UAB
- Investigation
- Spur Intelligence
- iPhone games
- Proxy code was found in 12 games
- Related network
- The SDK was linked to the Honeygain proxy network, a subsidiary of Oxylabs
- Cinema HQ
- Proxy components continued running when users tried to disable the feature