The data transmission occurred every 72 hours for text messages and call log information, and every 24 hours for other PII data.
The data collection and transmission capability is spread across different applications and files. These system applications have the following package names: All of the data collection and transmission capabilities we identified were supported by two system applications that cannot be disabled by the end user. Moreover, some transmitted the body of the user's text messages and call logs to a server in located in Shanghai. We analyzed the Personally Identifiable Information (PII) collected and transmitted in an encrypted format to servers in Shanghaiincluding one of the bestselling unlocked smartphones sold by major online retailers. The Adups web site also stated that it produces firmware that is integrated in more than 400 leading mobile operators, semiconductor vendors, and device manufacturers spanning from wearable and mobile devices to cars and televisions. In September 2016, Adups claimed on its web site to have a world-wide presence with over 700 million active users, and a market share exceeding 70 percent across over 150 countries and regions with offices in Shanghai, Shenzhen, Beijing, Tokyo, New Delhi, and Miami. Writing about the discovery in a press release, Kryptowire says:
Because monitoring was achieved at a firmware level, it was not picked up by antivirus tools, and multiple levels of encryption were used to disguise the data that was being transmitted. Kryptowire says that the smartphones - including the BLU R1 HD - were sold through major retailers such as Best Buy and Amazon.
0 kommentar(er)
