Kryptowire researchers also said a second Chinese handset manufacturer Cubot is also continuing to use the Adups software. Kryptowire maintains that in November Shanghai Adups Technology significantly scaled back the amount of data Adups collected from users, however is still collecting data that it shouldn’t on some Blu model phones. On the Blu’s Grand M model phone, Johnson said, Adups is still collecting cell tower IDs, list of installed applications, the user’s International Mobile Subscriber Identity and SIM serial number. The company claims the Kryptowire research is inaccurate. We only sent completely safe and reliable versions to our customers.” Since November 2016, all versions of FOTA were submitted to Google for certification. It has been pushed to our official website and partners through various channels and to the users immediately. 2016, a new version has been submitted and tested by the third-party security institutions, including Kryptowire, Google and AFLS Lab. “Those issues from 2016 have been solved. In a statement to Threatpost Shanghai Adups Technology stated: When confronted in November 2016, Shanghai Adups Technology said the data collection was a mistake, according to Johnson’s correspondence with the company. That was despite efforts by Google and Blu who worked with Adups last year to limit data collected and exfiltrated from phones. “But in May, I found that Adups was still collecting PII.” “At the time when I found it, they were getting all this stuff-text messages, call log, GPS location-then they rolled that back,” Johnson said. The data included owners’ full-body of text messages, call history with full telephone numbers, unique device identifiers including the International Mobile Subscriber Identity, serial number, Media Access Control address, and the International Mobile Equipment Identity.Īdups claims on its website 700 million devices, including cars and other connected devices, use its software. Last year, Kryptowire reported that popular low-cost Miami-based phone manufacturer Blu Products was using Adups on several of its phones, surreptitiously collecting user data from Blu handset models R1 HD and Life One X2.
Ryan Johnson, research engineer and cofounder of Kryptowire, who was part of the original team that found the spyware, told attendees Adups was still sending user data back to the company’s Chinese-based servers as recently as May. Researchers said the company was still collecting personal identifiable information without user consent despite coming under fire for the practice last year. was roundly criticized Wednesday during a Black Hat session for continuing to use spyware called Adups on at least two Android handset makers’ phones.
0 kommentar(er)
