Android smartphones in US sending personal data to China: Report

These devices were available through major US-based online retailers like Amazon and BestBuy and included popular smartphones such as BLU R1 HD devices, Kryptowire said in a statement.

Indo-Asian News Service
Washington, Publish Date: Nov 16 2016 3:52PM | Updated Date: Nov 16 2016 3:52PM
Android smartphones in US sending personal data to China: ReportRepresentational Image

US security firm Kryptowire has identified Android smartphones with a "backdoor" software in the country that collected sensitive personal data and transmitted this data to third-party servers in China without disclosure or the users' consent.

These devices were available through major US-based online retailers like Amazon and BestBuy and included popular smartphones such as BLU R1 HD devices, Kryptowire said in a statement.
 
"The core of the monitoring activities took place using a commercial Firmware Over The Air (FOTA) update software system that was shipped with the Android devices we tested and were managed by Shanghai Adups Technology Co. Ltd," Kryptowire said.
 
These devices actively transmitted user and device information including text messages, contact lists, call history with full telephone numbers, unique device identifiers including the International Mobile Subscriber Identity (IMSI) and the International Mobile Equipment Identity (IMEI).
 
Adups claims to have a worldwide presence with over 700 million active users, and a market share exceeding 70 per cent across over 150 countries and regions with offices in Shanghai, Shenzhen, Beijing, Tokyo, New Delhi and Miami.
 
"The Adups website also stated that it produces firmware that is integrated in more than 400 leading mobile operators, semiconductor vendors, and device manufacturers spanning from wearable and mobile devices to cars and televisions," the Kryptowire statement late on Tuesday read.
 
Later, a lawyer for Shanghai AdUps Technologies told The New York Times that the data was not being collected for the Chinese government, stating: "This is a private company that made a mistake."
 
A BLU spokesperson told technology website Ars Technica that the software backdoor affected a "limited number of BLU devices" and that the "affected application has since been self-updated and the functionality verified to be no longer collecting or sending this information". 
 
The firmware that shipped with the mobile devices and subsequent updates allowed for the remote installation of applications without the users' consent and, in some versions of the software, the transmission of fine-grained device location information, the Kryptowire statement said.
 
The firmware also collected and transmitted information about the use of applications installed on the monitored device, bypassed the Android permission model, executed remote commands with escalated (system) privileges, and was able to remotely reprogramme the devices.
 
"Our findings are based on both code and network analysis of the firmware. The user and device information was collected automatically and transmitted periodically without the users' consent or knowledge,a the global security firm noted.
 
The collected information was encrypted with multiple layers of encryption and then transmitted over secure web protocols to a server located in Shanghai.
 
This software and behaviour bypasses the detection of mobile anti-virus tools because they assume that software that ships with the device is not malware and thus, it is white-listed.
 
"We analysed the Personally Identifiable Information (PII) collected and transmitted in an encrypted format to servers in Shanghai, including one of the bestselling unlocked smartphones sold by major online retailers," Kryptowire added.
 
Kryptowire was jump-started by the US Defense Advanced Research Projects Agency (DARPA) and the Department of Homeland Security (DHS).

Latest News

  1. Restrictions imposed in Budgam, Anantnag
  2. Restrictions imposed in Budgam, Anantnag
  1. Make transport arrangements for candidates appearing in CET: Div Com to DCs
  2. Make transport arrangements for candidates appearing in CET: Div Com to DCs
  1. Pre-paid phone service suspended in Kashmir amid protests over killing of Sabzar Bhat
  2. Pre-paid phone service suspended in Kashmir amid protests over killing of Sabzar Bhat
  1. PSC postpones Civil Services Judicial exam scheduled for May 28
  2. PSC postpones Civil Services Judicial exam scheduled for May 28
  1. Mirwaiz, aide placed under house arrest
  2. Mirwaiz, aide placed under house arrest
  1. JKLF Chairman Yasin Malik reaches Tral, addresses mourners in Sabzar's native village
  2. JKLF Chairman Yasin Malik reaches Tral, addresses mourners in Sabzar's native village
  1. Stone-pelting protests erupted at two dozen places after killing of Sabzar Bhat: Police
  2. Stone-pelting protests erupted at two dozen places after killing of Sabzar Bhat: Police
  1. 10 year-old girl killed in road accident in Tral: Police
  2. 10 year-old girl killed in road accident in Tral: Police
  1. Sabzar killing: Sixteen injured in clashes in Shopian
  2. Sabzar killing: Sixteen injured in clashes in Shopian
  1. Section 144 imposed in Ganderbal district of central Kashmir
  2. Section 144 imposed in Ganderbal district of central Kashmir
  1. CEO Anantnag hit by stone during clashes in Bijbehara
  2. CEO Anantnag hit by stone during clashes in Bijbehara
  1. 1,530 migrants, refugees died crossing Mediterranean in 2017: UN
  2. 1,530 migrants, refugees died crossing Mediterranean in 2017: UN
  1. Sabzar killing: Resistance camp calls ‘Tral chalo’ on May 30, shutdown on May 28, 29
  2. Sabzar killing: Resistance camp calls ‘Tral chalo’ on May 30, shutdown on May 28, 29
  1. Tral gunfight and civilian killing: Police version
  2. Tral gunfight and civilian killing: Police version
  1. Sabzar killing: Curfew-like restrictions imposed in Srinagar parts ‘until further orders’
  2. Sabzar killing: Curfew-like restrictions imposed in Srinagar parts ‘until further orders’
  1. Burhan Wani's successor Sabzar Bhat among nine killed in Kashmir, clashes erupt
  2. Burhan Wani's successor Sabzar Bhat among nine killed in Kashmir, clashes erupt
  1. Civilian killed after forces open fire in Tral village
  2. Civilian killed after forces open fire in Tral village
  1. 18 killed in Afghan car bombing
  2. 18 killed in Afghan car bombing
  1. JK Bank postpones SKICC function 'due to prevailing circumstances'
  2. JK Bank postpones SKICC function 'due to prevailing circumstances'
  1. Sabzar killing: Four suffer bullet injuries near encounter site in Tral village
  2. Sabzar killing: Four suffer bullet injuries near encounter site in Tral village
  1. Sabzar killing: Dozens injured in clashes in Anantnag; one referred to Srinagar
  2. Sabzar killing: Dozens injured in clashes in Anantnag; one referred to Srinagar
  1. Sabzar killing: Internet services suspended in Kashmir
  2. Sabzar killing: Internet services suspended in Kashmir
  1. Spontaneous shutdown across Kashmir to mourn Sabzar killing
  2. Spontaneous shutdown across Kashmir to mourn Sabzar killing
  1. Sabzar killing: Class work in Srinagar colleges suspended, clashes erupt in Kashmir
  2. Sabzar killing: Class work in Srinagar colleges suspended, clashes erupt in Kashmir
  1. Sabzar among two militants killed in encounter in Tral village
  2. Sabzar among two militants killed in encounter in Tral village
  1. Two killed in road accident in Pampore
  2. Two killed in road accident in Pampore
  1. Egyptian jets carry out 6 strikes against terror camps in Libya
  2. Egyptian jets carry out 6 strikes against terror camps in Libya
  1. Clashes erupt as gunfight rages in Tral village; dozens injured
  2. Clashes erupt as gunfight rages in Tral village; dozens injured
  1. 15 lakh rupees looted from ATM in Langate
  2. 15 lakh rupees looted from ATM in Langate
  1. Infiltration bid foiled in north Kashmir, six militants killed: Army
  2. Infiltration bid foiled in north Kashmir, six militants killed: Army
  1. Video: Gunfight erupts in Tral village; Sabzar believed to be among trapped militants
  2. Video: Gunfight erupts in Tral village; Sabzar believed to be among trapped militants