News: These Android Phones Could Be Affected by Adups' Chinese Spyware

News: These Android Phones Could Be Affected by Adups' Chinese Spyware
Kryptowire, a company specializing in mobile security solutions, released a report on Tuesday, November 15 that exposed firmware in a number of Android devices that was collecting personally identifying information (PII) and uploading it to third-party servers without users' knowledge.Unlike malware you might accidentally download on the internet, this software comes preinstalled on a number of entry-tier smartphones.Shanghai Adups Technology Co., a Chinese provider of professional FOTA (firmware over-the-air) update services to OEMs, mobile network operators, and semiconductor vendors around the world, was said to have created the PII-stealing code at the request of an unknown Chinese client. Adups has since apologized, stating that this data was collected in error and was deleted.Don't Miss: How to Test for Adups' Spyware on Your Phone—& Disable ItAccording to the report, Kryptowire was able to identify specific files being uploaded to servers belonging to the Adups company "every 72 hours for text messages and call log information, and every 24 hours for other PII data," via two system apps, com.adups.fota.sysoper and com.adups.fota, which cannot be disabled by the user. An example of the sort of information being transmitted was provided:It is worth noting that [the] user's text messages are encrypted using DES. Below is an example entry of the dc_msg_key.json file:{"dc_date": "2016-09-13 17:01:07","dc_type": "1","keyword": "HUnrP/GTiH/aEPM8bVXmaw==","md5": "B865B089A298D529B4602A3D359FE4C8","msg_date": "1473798497903","msg_type": "1","tell": "+1540XXXXXXX"}During our analysis we identified the necessary key to encrypt and decrypt these messages. The aforementioned entry in plaintext is: "Be there in 5".
— Kryptowire
What Phones Are Affected by Adups' Spyware?So far, the only device models in the US that have been shown to be affected were sold on Amazon by device manufacturer BLU, despite rumors that Huawei and ZTE smartphones also were affected.The spyware-laced BLU models are:R1 HD Energy X Plus 2 Studio Touch Advance 4.0 L2 Neo XL Energy Diamond For their part, Amazon has made any affected product unavailable for purchase. BLU has issued the following statement:BLU Products has identified and quickly removed a recent security issue caused by a 3rd party application which had been collecting unauthorized personal data in the form of text messages, call logs, and contacts from customers using a limited number of BLU mobile devices.Our customer's privacy and security are of the [utmost] importance and priority.The affected application has since been self-updated and the functionality verified to be no longer collecting or sending this information.
— BLU ProductsIf we discover any other Android phones that are/were affected by Adups' spyware, we'll make sure to add them to this list. So far, aside from Huawei and ZTE, Google and LG have also stated that their branded devices do not carry Adups' firmware. OnePlus and HTC are still investigating.

How to Check Your Phone for Adups' SpywareIf you have a BLU device and want to see if your device is currently vulnerable to this spyware, you can go to Settings -> Apps, then select the three-dot menu in the right corner. Next, select "Show system," then scroll down and open "Wireless Update." Devices with version numbers 5.0.x through 5.3.x are affected. Those listing version number 5.4.0.3.004 are not. If yours has not been self-updated yet, you can contact BLU for further details. A BLU phone that is not affected. Images via BLU Products If you have another brand Android phone and want to see if you're vulnerable, make sure to check out the guide below, which will show you how to test for Adups' spyware, as well as how to disable it.Don't Miss: How to Test for Adups' Spyware on Your Phone—& Disable ItWe have reached out for more details from Kryptowire and will update this post when we receive any new information.Follow Gadget Hacks on Facebook, Twitter, Google+, and YouTube Follow Android Hacks on Facebook, Twitter, and Pinterest Follow WonderHowTo on Facebook, Twitter, Pinterest, and Google+
Cover image by BLU Products



Sep 19, 2018 · Both the iPhone XS and iPhone XR support the same fast wired charging as the iPhone X (a 50% charge in 30 minutes from flat), but Apple has again declined to include a fast charger in the box.


Each phone tied to your account will be displayed with its upgrade eligibility date. If you are eligible for an iPhone upgrade, make sure to check out our list of tips for reselling your used iPhone. Retailers are offering reasonable prices for iPhone buybacks, and people continue to get good offers for used iPhones on sites like Craigslist.
How to Find Out if You're Eligible for iPhone 7 Upgrade | Fox


iOS 12 users can finally enjoy Fortnite again after Apple's latest beta fixed random game crashes. A problem with downloading Netflix titles has also been eliminated, but a number of new bugs
Fortnite for iOS Finally Supports MFi Controllers


Or you can download youtube video using youtube app and watch them later without any internet connection. Lengthily 720 pixel high quality video always buffer even in high speed connection. In such condition you can't see 1 hour video in a day.
Apple TV: Worth it without Internet connection? - iPhone


What the application does is that it enables a user to change daily wallpaper on the lock screen or desktop background from Bing or Spotlight automatically. In general it is a simple app with a few options that expand the personalization experience on your Windows 10 device.
Automatically Save Windows Spotlight and Bing Images as


Enjoy a slideshow of your personal photos from your Google Photos library on any voice-supported TV with Chromecast or Chromecast built-in — using only your voice. Important: To view Google Photos using Google Home, you must have a Google Nest display with Photo frame enabled, Chromecast, or TV with Chromecast built-in linked to Google Home.
The 100 Best Android Apps for 2019 | PCMag.com


Phone Unlocking Service - Learn how to unlock HP iPAQ HW6910 phone. Find an unlock code for HP iPAQ HW6910 cell phone or other mobile phone from UnlockBase.
HP Hw6510 - iPAQ Mobile Messenger Smartphone 55 MB


AppsGeyser Product Tour from Andrew Kudrin on Vimeo.. Once you've made your app, you can upload it to the Android Market or download it. This method of making Android Apps is especially great if
Appy Pie - How to make an app in 3 easy steps | App Builder


If you lose an Android phone or tablet, or Wear OS watch, you can find, lock, or erase it. If you've added a Google Account to your Android device, Find My Device is automatically turned on. To use Find My Device, your lost device must: Be turned on; Be signed in to a Google Account; Be connected to mobile data or Wi-Fi; Be visible on Google Play


New tutorial for Lens Whacking Technique here:

Fortnite Season 7 is in full swing and Epic Games has brought what was previously a feature exclusive to the iPhone XS, XS Max, and XR to the iPad Pro 2018.
AppleDigger - Apple, iOS, iPhone, iDevice News & Tutorials

0 komentar:

Posting Komentar