News: These Android Phones Could Be Affected by Adups' Chinese Spyware
Kryptowire, a company specializing in mobile security solutions, released a report on Tuesday, November 15 that exposed firmware in a number of Android devices that was collecting personally identifying information (PII) and uploading it to third-party servers without users' knowledge.Unlike malware you might accidentally download on the internet, this software comes preinstalled on a number of entry-tier smartphones.Shanghai Adups Technology Co., a Chinese provider of professional FOTA (firmware over-the-air) update services to OEMs, mobile network operators, and semiconductor vendors around the world, was said to have created the PII-stealing code at the request of an unknown Chinese client. Adups has since apologized, stating that this data was collected in error and was deleted.Don't Miss: How to Test for Adups' Spyware on Your Phone—& Disable ItAccording to the report, Kryptowire was able to identify specific files being uploaded to servers belonging to the Adups company "every 72 hours for text messages and call log information, and every 24 hours for other PII data," via two system apps, com.adups.fota.sysoper and com.adups.fota, which cannot be disabled by the user. An example of the sort of information being transmitted was provided:It is worth noting that [the] user's text messages are encrypted using DES. Below is an example entry of the dc_msg_key.json file:{"dc_date": "2016-09-13 17:01:07","dc_type": "1","keyword": "HUnrP/GTiH/aEPM8bVXmaw==","md5": "B865B089A298D529B4602A3D359FE4C8","msg_date": "1473798497903","msg_type": "1","tell": "+1540XXXXXXX"}During our analysis we identified the necessary key to encrypt and decrypt these messages. The aforementioned entry in plaintext is: "Be there in 5".
— Kryptowire
What Phones Are Affected by Adups' Spyware?So far, the only device models in the US that have been shown to be affected were sold on Amazon by device manufacturer BLU, despite rumors that Huawei and ZTE smartphones also were affected.The spyware-laced BLU models are:R1 HD Energy X Plus 2 Studio Touch Advance 4.0 L2 Neo XL Energy Diamond For their part, Amazon has made any affected product unavailable for purchase. BLU has issued the following statement:BLU Products has identified and quickly removed a recent security issue caused by a 3rd party application which had been collecting unauthorized personal data in the form of text messages, call logs, and contacts from customers using a limited number of BLU mobile devices.Our customer's privacy and security are of the [utmost] importance and priority.The affected application has since been self-updated and the functionality verified to be no longer collecting or sending this information.
— BLU ProductsIf we discover any other Android phones that are/were affected by Adups' spyware, we'll make sure to add them to this list. So far, aside from Huawei and ZTE, Google and LG have also stated that their branded devices do not carry Adups' firmware. OnePlus and HTC are still investigating.
How to Check Your Phone for Adups' SpywareIf you have a BLU device and want to see if your device is currently vulnerable to this spyware, you can go to Settings -> Apps, then select the three-dot menu in the right corner. Next, select "Show system," then scroll down and open "Wireless Update." Devices with version numbers 5.0.x through 5.3.x are affected. Those listing version number 5.4.0.3.004 are not. If yours has not been self-updated yet, you can contact BLU for further details. A BLU phone that is not affected. Images via BLU Products If you have another brand Android phone and want to see if you're vulnerable, make sure to check out the guide below, which will show you how to test for Adups' spyware, as well as how to disable it.Don't Miss: How to Test for Adups' Spyware on Your Phone—& Disable ItWe have reached out for more details from Kryptowire and will update this post when we receive any new information.Follow Gadget Hacks on Facebook, Twitter, Google+, and YouTube Follow Android Hacks on Facebook, Twitter, and Pinterest Follow WonderHowTo on Facebook, Twitter, Pinterest, and Google+
Cover image by BLU Products
Tap the "Set" button followed by "Set Lock Screen" to replace your current lock screen wallpaper with this image. You can also tap the "Set Home Screen" or "Set Both" buttons if you also want to change your home screen wallpaper.
How to quickly access Wallet and Apple Pay on the Lock screen
Choose whether you want to delete only certain parts of your Google history. This is preferable if you use Google Now, because your cards are based on your Google history. Deleting the finance, shopping or other sections may remove the efficacy of those cards and your voice search.
How to Delete Google Search History, Accounts & Data (Guide)
How to Download free sheet music for any instrument
With every cell phone outfitted with a camera, who needs the emergency 7-Eleven point-n-shoot? Well, until it transformed from photographic instrument to weapon. Be careful. Seriously. Consider the how-to lineage. The disposable camera taser hack has inspired derivative mods. Click to play Transform a camera into a taser video (will open in new
How to Hack a camera into a taser - Hacks, Mods & Circuitry
This was the article about What Kind of Processor You Have (ARM, ARM64, or x86). You can poll your favorite and do let us know. Share this article with your friends and let's see what kind of processor they are using on their device.
How to See What Kind of Processor You Have (ARM, ARM64, or
this is how to make a mini flamethrower (please don't use this to melt crack ,etc. I take no responsibility for what you do with this) (notice the small deer walknig past at 00:21 lol, thats my
How to overclock your CPU - TechRadar
I drive for both Lyft and UberX, often at the same time to increase my chances of earning. (Uber X is the same as Lyft--a person with a car--not to be confused with the black car service they do, too.)
Busiest Time of the Year for Uber Drivers: October-December
Instructions. 1. Search by name or directly paste the link of video you want to convert. 2. Click "Start" button to begin converting process. 3. Select the video/audio format you want to download, then click "Download" button
Top YouTube MP3 Audio Music Extractor for Mac and Windows
Samsung galaxy s5 touchwiz software tour how to make your home screen awesome verizon samsung galaxy note ii screen shot your galaxy s5 home screens i need ideas so want spend samsung galaxy s7 edge home screen al on imgur. Whats people lookup in this blog:
How to Create a Rotating 3D Cube Live Wallpaper on Your
Use 'Order poster' link under the chart preview, if you would like to print it professionally using our service, or 'View PDF' to save a PDF file. If you build your tree in Family Tree Builder, please read the following article: How do I print my entire family tree on one page in Family Tree Builder?
How do I print my entire family tree on one page in Family
How To Install Custom ROM on Android. If you are installing a ROM running on 4.4.2, you'll want a GApps package for 4.4.2. Google Photos is Google's latest Android app to get a dark theme.
How to Install a Custom ROM on Your HTC One for a Completely
0 comments:
Post a Comment