Chinese smartphone models spying on users

A secret backdoor installed on some low-cost Chinese Android smartphones collects and transmits sensitive personal information including the full content of text messages to a third-party server, according to Kryptowire.

The security company said it had identified several models of Android smartphone with firmware designed to transmit sensitive data without disclosure or the user’s consent.

The firmware transmits information including contact lists, call history and full telephone numbers and unique device identifier numbers.

The monitoring activities take place using firmware over the air (FOTA) update software developed by Shanghai Adups Technology, a company that provides cloud-based FOTA update services.

Adups boasts that its software has over 700 million active users and a market share of over 70%, and produces firmware integrated in devices offered by more than 400 operators, chipmakers and device manufacturers.

Kryptowire research found that data transmission occurred very 72 hours for text messages and call log information and every 24 hours for other personally identifying information.

Kryptowire said it has relayed its findings to Google, Amazon and Adups, and Google has instructed Adups to remove the surveillance ability from devices that run services including the Google Play Store, according to The New York Times.

The report also cites representatives from Adups as stating that the functionality was developed to allow a Chinese manufacturer to monitor user behaviour within China to optimise customer support and was never intended for phones outside of the market. But the functionality has been discovered on some low-cost devices sold in US retail stores.

Image courtesy of Japanexperterna.se under CC