Malware Found Pre-Installed on Xiaomi, Huawei, Lenovo Phones [pdf]

geographomics wrote: post #3

This seems to be the report referred to in the linked article: https://public.gdatasoftware.com/Presse/Publikationen/Malwar...

It's interesting that the report states

"The G DATA security experts are certain that the manufacturers are not the perpetrators in the majority of cases. Renowned companies will not risk their reputation by distributing malware in the firmware."

Manufacturers have no qualms about installing bloatware and even spyware onto laptops. It would be interesting to know what standards, if any are used to sift out the malware from potential bloatware candidates.

Re: Malware Found Pre-Installed on Xiaomi, Huawei, Lenovo Phones [pdf]

#6

Post by spiralpolitik » Tue, Sep 08, 2015, 3:56 AM UTC

z2 wrote: post #5

geographomics wrote: post #3

This seems to be the report referred to in the linked article: https://public.gdatasoftware.com/Presse/Publikationen/Malwar...

It's interesting that the report states "The G DATA security experts are certain that the manufacturers are not the perpetrators in the majority of cases. Renowned companies will not risk their reputation by distributing malware in the firmware." Manufacturers have no qualms about installing bloatware and even spyware onto laptops. It would be interesting to know what standards, if any are used to sift out the malwar…

Clearly the author does not consider Lenovo to be a "Renowned company" given that they have form for doing that very act. Twice.

Re: Malware Found Pre-Installed on Xiaomi, Huawei, Lenovo Phones [pdf]

#7

Post by [deleted] » Tue, Sep 08, 2015, 4:19 AM UTC

GhotiFish wrote: post #4

related articles: http://www.cnbc.com/2015/09/02/malware-targeting-android-on-... https://www.myhomegadgets.com/2015/09/07/smartphones-you-pur... http://www.prweb.com/releases/2015/09/prweb12935451.htm http://www.huffingtonpost.com/entry/android-malware-pre-inst... https://grahamcluley.com/2015/07/nearly-5000-android-malware... http://www.paulgraham.com/submarine.html https://www.gdatasoftware.com/

[deleted]

Re: Malware Found Pre-Installed on Xiaomi, Huawei, Lenovo Phones [pdf]

#8

Post by voltagex_ » Tue, Sep 08, 2015, 4:30 AM UTC

Pretty light on technical details. I'll see if I have time over the next few days to pull one or two of the ROMs apart.

Re: Malware Found Pre-Installed on Xiaomi, Huawei, Lenovo Phones [pdf]

#9

Post by est » Tue, Sep 08, 2015, 4:30 AM UTC

geographomics wrote: post #3

This seems to be the report referred to in the linked article: https://public.gdatasoftware.com/Presse/Publikationen/Malwar...

Keyword:

com.facebook.katama

Android.Monitor.Gsyn.B

Android.Trojan.Andup.D 1-AP6YWG

This is mostly false report because at least Xiaomi don't have any Facebook app pre-installed. Just bunch of MIUI crapware.

Affected models are Huawei G510, Lenovo S860, Xiaomi MI3 (and 18 other ignored models not mentioned in title) which dates back to as early as 2012, in Android 4.0 age I assume. Pretty good craigslist deal to get there second hand phones tested for a 2015 security report. Hey their "security expert" might even did a double wipe and factory reset in recovery!

Re: Malware Found Pre-Installed on Xiaomi, Huawei, Lenovo Phones [pdf]

#10

Post by 0grr » Tue, Sep 08, 2015, 4:42 AM UTC

In most cases it is most certainly the vendors who install custom roms before shipping to overseas customers. Any one who have ever bought grey imported chinese phones should be familiar with this; flashing official, custom roms yourself is a necessity.