News: These Android Phones Could Be Affected by Adups' Chinese Spyware

News: These Android Phones Could Be Affected by Adups' Chinese Spyware
Kryptowire, a company specializing in mobile security solutions, released a report on Tuesday, November 15 that exposed firmware in a number of Android devices that was collecting personally identifying information (PII) and uploading it to third-party servers without users' knowledge.Unlike malware you might accidentally download on the internet, this software comes preinstalled on a number of entry-tier smartphones.Shanghai Adups Technology Co., a Chinese provider of professional FOTA (firmware over-the-air) update services to OEMs, mobile network operators, and semiconductor vendors around the world, was said to have created the PII-stealing code at the request of an unknown Chinese client. Adups has since apologized, stating that this data was collected in error and was deleted.Don't Miss: How to Test for Adups' Spyware on Your Phone—& Disable ItAccording to the report, Kryptowire was able to identify specific files being uploaded to servers belonging to the Adups company "every 72 hours for text messages and call log information, and every 24 hours for other PII data," via two system apps, com.adups.fota.sysoper and com.adups.fota, which cannot be disabled by the user. An example of the sort of information being transmitted was provided:It is worth noting that [the] user's text messages are encrypted using DES. Below is an example entry of the dc_msg_key.json file:{"dc_date": "2016-09-13 17:01:07","dc_type": "1","keyword": "HUnrP/GTiH/aEPM8bVXmaw==","md5": "B865B089A298D529B4602A3D359FE4C8","msg_date": "1473798497903","msg_type": "1","tell": "+1540XXXXXXX"}During our analysis we identified the necessary key to encrypt and decrypt these messages. The aforementioned entry in plaintext is: "Be there in 5".
— Kryptowire
What Phones Are Affected by Adups' Spyware?So far, the only device models in the US that have been shown to be affected were sold on Amazon by device manufacturer BLU, despite rumors that Huawei and ZTE smartphones also were affected.The spyware-laced BLU models are:R1 HD Energy X Plus 2 Studio Touch Advance 4.0 L2 Neo XL Energy Diamond For their part, Amazon has made any affected product unavailable for purchase. BLU has issued the following statement:BLU Products has identified and quickly removed a recent security issue caused by a 3rd party application which had been collecting unauthorized personal data in the form of text messages, call logs, and contacts from customers using a limited number of BLU mobile devices.Our customer's privacy and security are of the [utmost] importance and priority.The affected application has since been self-updated and the functionality verified to be no longer collecting or sending this information.
— BLU ProductsIf we discover any other Android phones that are/were affected by Adups' spyware, we'll make sure to add them to this list. So far, aside from Huawei and ZTE, Google and LG have also stated that their branded devices do not carry Adups' firmware. OnePlus and HTC are still investigating.

How to Check Your Phone for Adups' SpywareIf you have a BLU device and want to see if your device is currently vulnerable to this spyware, you can go to Settings -> Apps, then select the three-dot menu in the right corner. Next, select "Show system," then scroll down and open "Wireless Update." Devices with version numbers 5.0.x through 5.3.x are affected. Those listing version number 5.4.0.3.004 are not. If yours has not been self-updated yet, you can contact BLU for further details. A BLU phone that is not affected. Images via BLU Products If you have another brand Android phone and want to see if you're vulnerable, make sure to check out the guide below, which will show you how to test for Adups' spyware, as well as how to disable it.Don't Miss: How to Test for Adups' Spyware on Your Phone—& Disable ItWe have reached out for more details from Kryptowire and will update this post when we receive any new information.Follow Gadget Hacks on Facebook, Twitter, Google+, and YouTube Follow Android Hacks on Facebook, Twitter, and Pinterest Follow WonderHowTo on Facebook, Twitter, Pinterest, and Google+
Cover image by BLU Products



Nowadays, you can still play the classic arcade Pac-man game straight off the browser with Google Search. Just type in the term "Pacman" to get the option to play the game. This Google Easter Egg Game is available on both desktop and mobile.
How to unlock the Google Play Games Easter egg - CNET


If you simply opened the download without asking Firefox to save it, it's possible that you can still access your file (if you did not close Firefox in the meantime). Files are are opened and not stored, are temporarily placed in a cache folder so you can use it while your Firefox session lasts.


How to Access Your Computer from Your iPhone. There are several methods for accessing your computer with an iPhone. Most options can be costly, charging a one-time fee or monthly/annual subscriptions.
Easy Ways to Display iPhone Screen on Computer - AirMore


5. That's it. You will now be able to hack Facebook account using this Facebook freezer. This freezing will continue until you hit "Stop Freezing". So guys, use this Facebook freezer software to hack Facebook account and trick out your friends. This Facebook Freeezer is efficient software to hack Facebook account.
Free Download Facebook Account Freezer v1.0


#1 On Computer using Google Chrome Browser. The best way to at IMDB and rotten tomatoes rating to Netflix is by using google chrome to watch all Netflix programs. I am saying that because, then you can use a simple chrome plugin that will help you in rating any of the netflix media by imdb or rotten tomatoes rating.
Add IMDB and Rotten Tomatoes Ratings to Your Netflix with

How to Use Google Buzz on your Android phone - Gadget Hacks


How to use Controllers with iOS & Android!! I used bluetooth controllers, mainly in this and hooked them up to Minecrtaft PE! Game controller for Apple TV, iPad, iPhone, iPod, How To Play
How to Use Wii U Pro Controller on Iphone Ipad and Ipod - YouTube


If you are running Windows 10 on a laptop or tablet your battery life is important. Besides using the live estimate in the notification area, we're going to show you how to generate a detailed
Easy Test of Battery Amp-Hours Capacity: 5 Steps (with Pictures)

10 best news apps for Android! (Updated 2019 - Android


Here my recommendation is Samsung File Transfer( Win/Mac), which can help you transfer files between Samsung phone and computer with simple operations. With it, all media files, like photos, movies, music, etc. and other files, such as contacts and text messages, can be exported between Samsung and PC without any restriction.
How to Send Pictures from Your Cell Phone to Your - wikiHow


If you've ever customized your app icons or played around with Shortcuts (previously called Workflow), you probably know how important URL scheme names are. Nearly all iOS apps assign themselves one of these names, and you need to know them if you want to add custom icons to your home screen or create a Shortcuts workflow that opens an app on your iPhone up.
Always updated list of iOS app URL scheme names «iOS & iPhone


How to Get Custom Ringtones on iPhone without iTunes(Free) If you want to make your own ringtones for iPhone with songs in your music library, you can use a ringtones maker for iPhone XR/XS, iPhone X/8/8 Plus, iPhone 7/7 Plus, iPhone 6s/6s Plus, iPhone 6/6 Plus, iPhone 5/5s/5c and iPhone 4/4s.
How to set any song as iPhone ringtone without using iTunes

0 comments:

Post a Comment