{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","feed_url":"https://feed.craftedsignal.io/tags/unwanted-software/feed.json","home_page_url":"https://feed.craftedsignal.io/","items":[{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["LG Monitor App Installer","LG UltraGear 34GX900A-B","LG UltraFine 32UN880-B"],"_cs_severities":["medium"],"_cs_tags":["unwanted-software","adware","privacy-violation","windows","lg"],"_cs_type":"advisory","_cs_vendors":["LG"],"content_html":"\u003cp\u003eLG monitors are automatically installing an adware-like application on Windows PCs, raising significant privacy and cybersecurity concerns. Upon connecting certain LG monitors, Windows Update initiates the download and installation of the \u0026quot;LG Monitor App Installer\u0026quot; from the Microsoft Store, bypassing explicit user consent. This application then registers itself to run persistently at system startup, frequently displaying unsolicited advertisements for McAfee antivirus trials. The app is noted to leverage \u0026quot;runFullTrust\u0026quot; permissions, allowing it to operate outside the standard Windows AppContainer sandbox, further increasing potential security implications. Reports of this behavior, affecting models such as the LG UltraGear 34GX900A-B and LG UltraFine 32UN880-B, date back to at least 2024, with a recent surge in McAfee promotional pop-ups.\u003c/p\u003e\n\u003ch2 id=\"attack-chain\"\u003eAttack Chain\u003c/h2\u003e\n\u003col\u003e\n\u003cli\u003eA user connects a compatible LG monitor (e.g., LG UltraGear 34GX900A-B or LG UltraFine 32UN880-B) to a Windows PC.\u003c/li\u003e\n\u003cli\u003eThe Windows operating system detects the newly connected hardware and retrieves associated device metadata.\u003c/li\u003e\n\u003cli\u003eWindows Update automatically retrieves associated LG extension and software component packages from Microsoft.\u003c/li\u003e\n\u003cli\u003eThe \u0026quot;LG Monitor App Installer\u0026quot; application is then installed from the Microsoft Store without an explicit user approval prompt.\u003c/li\u003e\n\u003cli\u003eThe newly installed application registers itself to launch automatically when Windows starts.\u003c/li\u003e\n\u003cli\u003eUpon subsequent system reboots, the application initiates and displays unsolicited promotional pop-up messages, primarily advertising McAfee antivirus trials.\u003c/li\u003e\n\u003cli\u003eThe application operates with \u0026quot;runFullTrust\u0026quot; permissions, granting it capabilities beyond the typical restricted Windows AppContainer sandbox.\u003c/li\u003e\n\u003c/ol\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eThis behavior results in unwanted software installation and persistent, unsolicited advertising on user systems, effectively functioning as adware. Users connecting affected LG monitors, including older models like the LG UltraFine 32UN880-B, are impacted across various sectors. The installation occurs without explicit consent, leading to a degradation of user experience, potential consumption of system resources, and privacy concerns due to an unapproved \u0026quot;full-trust\u0026quot; application running persistently. While there is no evidence of data theft or administrative privilege escalation, the unconsented installation and persistent advertising undermine user control over their computing environment.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRemove the \u0026quot;LG Monitor App Installer\u0026quot; via Windows Settings \u0026gt; Apps \u0026amp; Features to uninstall the unwanted application.\u003c/li\u003e\n\u003cli\u003eDisable any remaining LG-related entries under Windows Settings \u0026gt; Startup Apps to prevent persistent execution.\u003c/li\u003e\n\u003cli\u003eFor Windows Pro and Enterprise users, enable the Group Policy setting \u0026quot;Prevent automatic download of applications associated with device metadata\u0026quot; located under Computer Configuration \u0026gt; Administrative Templates \u0026gt; System \u0026gt; Device Installation to block similar future installations.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-07-20T14:49:16Z","date_published":"2026-07-20T14:49:16Z","id":"https://feed.craftedsignal.io/briefs/2026-07-lg-monitor-adware-installer/","summary":"Connecting certain LG monitors to Windows PCs triggers Windows Update to automatically install the 'LG Monitor App Installer' without user consent, which then runs at system startup and frequently displays advertisements for McAfee antivirus trials.","title":"LG Monitors Auto-Install Adware-Like App on Windows PCs","url":"https://feed.craftedsignal.io/briefs/2026-07-lg-monitor-adware-installer/"}],"language":"en","title":"CraftedSignal Threat Feed - Unwanted-Software","version":"https://jsonfeed.org/version/1.1"}