Menu
Forums
New posts
Search forums
What's new
New posts
New profile posts
Latest activity
Vault
Time Travel Schematics
T.E.C. Time Archive
The Why Files
Have You Seen...?
Chronovisor
TimeTravelForum.tk
TimeTravelForum.net
ParanormalNetwork.net
Paranormalis.com
ConspiracyCafe.net
Streams
Live streams
Featured streams
Multi-Viewer
Members
Current visitors
New profile posts
Search profile posts
Log in
Register
What's new
Search
Search
Search titles only
By:
New posts
Search forums
Menu
Log in
Register
Navigation
Install the app
Install
More options
Contact us
Close Menu
Forums
Paranormal Forum
Science & Technology
Android mobile devices from top vendors in China have pre-installed malware
JavaScript is disabled. For a better experience, please enable JavaScript in your browser before proceeding.
You are using an out of date browser. It may not display this or other websites correctly.
You should upgrade or use an
alternative browser
.
Reply to thread
Message
<blockquote data-quote="Mayhem" data-source="post: 243770" data-attributes="member: 9738"><p>China is currently the country with the largest number of Android mobile devices, but a recent <a href="https://arxiv.org/abs/2302.01890" target="_blank"><strong>study</strong></a> conducted by researchers from the University of Edinburgh and the Trinity College of Dublin revealed that top-of-the-line Android devices sold in the country are shipped with spyware.</p><p></p><p>The boffins used static and dynamic code analysis techniques to study the data transmitted by the preinstalled system apps on Android smartphones from three of the most popular vendors in China, Xiaomi, OnePlus, and Oppo Realme. The experts discovered several system, vendor and third-party apps with dangerous privileges.</p><p></p><p>The apps were designed to exfiltrate user and device information in a stealthy way, including system info, geolocation, user profile, social relationships, and call history.</p><p></p><p><a href="https://i0.wp.com/securityaffairs.com/wp-content/uploads/2023/02/Android-mobile-devices.jpg?ssl=1" target="_blank"><img src="https://i0.wp.com/securityaffairs.com/wp-content/uploads/2023/02/Android-mobile-devices.jpg?resize=377%2C425&ssl=1" alt="Android mobile devices" class="fr-fic fr-dii fr-draggable " style="" /></a></p><p>The smartphones analyzed by the r researchers were observed sending data to the device vendor and the Chinese mobile network operators (e.g., China Mobile and China Unicom), even though they do not provide any service to the device (i.e. the SIM card is not present in the phone or if the SIM card used was provided by a different operator in China or in the UK).</p><p></p><p>This malicious software puts users’ privacy at risk, it could be used to spy on users and unmasking of their identities.</p><p></p><p>The experts pointed out that also users that leave the country are exposed to surveillance, through the pre-installed software.</p><p></p><p>The researchers also compared the preinstalled system apps on the Chinese (CN) and Global (e.g., EU) Android OS distributions from the same OS developers. They discovered that the number of preinstalled third-party apps on CN OS distributions is 3 to 4 times larger than for the corresponding Global OS distribution and that these are given 8 to 10 times as many permissions as third-party apps in Global distributions.</p><p></p><p><em>“Overall, our findings paint a troubling picture of the state of user data privacy in the world’s largest Android market, and highlight the urgent need for tighter privacy controls to increase the ordinary people’s trust in technology companies, many of which are partially state-owned.” <a href="https://arxiv.org/abs/2302.01890" target="_blank"><strong>reads</strong></a> the paper published by the experts.</em></p><p></p><p>could easily lead to the persistent tracking of users and the easy unmasking of their identities.</p><p></p><p>The experts measured the network traffic generated by the devices when in-use by a privacy-aware consumer, who opts out of analytics and personalization, does not use any other optional third-party services or any cloud storage, and has not set up an account on any platform of the OS distribution developer.</p><p></p><p>The researchers discovered major differences in terms of how privacy provisions are enforced in different regions.</p><p></p><p>In China, phone numbers are registered under a citizen ID, which means that was possible to link the device to the real identity of the owners.</p><p></p><p>Chinese manufacturers have yet to comment on the research.</p><p></p><p></p><p>[URL unfurl="true"]https://securityaffairs.com/141989/malware/android-mobile-devices-china-malware.html[/URL]</p></blockquote><p></p>
[QUOTE="Mayhem, post: 243770, member: 9738"] China is currently the country with the largest number of Android mobile devices, but a recent [URL='https://arxiv.org/abs/2302.01890'][B]study[/B][/URL] conducted by researchers from the University of Edinburgh and the Trinity College of Dublin revealed that top-of-the-line Android devices sold in the country are shipped with spyware. The boffins used static and dynamic code analysis techniques to study the data transmitted by the preinstalled system apps on Android smartphones from three of the most popular vendors in China, Xiaomi, OnePlus, and Oppo Realme. The experts discovered several system, vendor and third-party apps with dangerous privileges. The apps were designed to exfiltrate user and device information in a stealthy way, including system info, geolocation, user profile, social relationships, and call history. [URL='https://i0.wp.com/securityaffairs.com/wp-content/uploads/2023/02/Android-mobile-devices.jpg?ssl=1'][IMG alt="Android mobile devices"]https://i0.wp.com/securityaffairs.com/wp-content/uploads/2023/02/Android-mobile-devices.jpg?resize=377%2C425&ssl=1[/IMG][/URL] The smartphones analyzed by the r researchers were observed sending data to the device vendor and the Chinese mobile network operators (e.g., China Mobile and China Unicom), even though they do not provide any service to the device (i.e. the SIM card is not present in the phone or if the SIM card used was provided by a different operator in China or in the UK). This malicious software puts users’ privacy at risk, it could be used to spy on users and unmasking of their identities. The experts pointed out that also users that leave the country are exposed to surveillance, through the pre-installed software. The researchers also compared the preinstalled system apps on the Chinese (CN) and Global (e.g., EU) Android OS distributions from the same OS developers. They discovered that the number of preinstalled third-party apps on CN OS distributions is 3 to 4 times larger than for the corresponding Global OS distribution and that these are given 8 to 10 times as many permissions as third-party apps in Global distributions. [I]“Overall, our findings paint a troubling picture of the state of user data privacy in the world’s largest Android market, and highlight the urgent need for tighter privacy controls to increase the ordinary people’s trust in technology companies, many of which are partially state-owned.” [URL='https://arxiv.org/abs/2302.01890'][B]reads[/B][/URL] the paper published by the experts.[/I] could easily lead to the persistent tracking of users and the easy unmasking of their identities. The experts measured the network traffic generated by the devices when in-use by a privacy-aware consumer, who opts out of analytics and personalization, does not use any other optional third-party services or any cloud storage, and has not set up an account on any platform of the OS distribution developer. The researchers discovered major differences in terms of how privacy provisions are enforced in different regions. In China, phone numbers are registered under a citizen ID, which means that was possible to link the device to the real identity of the owners. Chinese manufacturers have yet to comment on the research. [URL unfurl="true"]https://securityaffairs.com/141989/malware/android-mobile-devices-china-malware.html[/URL] [/QUOTE]
Insert quotes…
Verification
Post reply
Forums
Paranormal Forum
Science & Technology
Android mobile devices from top vendors in China have pre-installed malware
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.
Accept
Learn more…
Top