News

Rootkit Discovered in Over 2.8 Million Low-Cost Android Phones

Close to 3 million Android phones have been discovered to contain a very powerful rootkit/backdoor that leaves the user vulnerable to remote control, tracking and code execution attacks. These phones are affordable low-cost models and can be purchased in the US in any Best Buy store. Researchers from BitSight Technologies (a subsidiary of Anubis Networks) has detailed in their blog how this root kit was discovered, tested and thankfully so far, prevented from doing harm.

The malicious firmware was designed to hide and to be difficult to detect but secretly contact two pre-configured domains, sending information from the device. Surprisingly, the two domains were unregistered so BitSight technologies was able to acquire them immediately before any deployment and perform tests. The company purchased a BLU Studio G phone from Best Buy, built a passive network traffic system and performed the analysis which revealed that over 2.8 million devices are affected and have since tried to contact the domain they registered. This affects 55 different device models and based on the IP connecting to the domains, the vulnerability affects the entire world with the majority of users affected based in the United States. US-based BLU products is the most affected having 26.3% of the affected phones.

João Gouveia, a BitSight researcher who is part of the team who discovered the rootkit have further revealed that he has seen lots of connections coming from all sorts of sectors, including healthcare, government and banking.

Most of these phone models are what are considered “burner” or low-cost phones, previously thought of to be a safer due to their disposable nature. Recently, another security firm Kryptowire had also discovered a major vulnerability in the form of pre-installed backdoors on BLU R1 HD phones. They discovered the massive amounts of data from the user were being sent back to the Chinese company Shanghai AdUps Technologies, the software company who handles these phones. AdUps Technologies is also used by Huawei and ZTE.

Ron Perillo

Disqus Comments Loading...

Recent Posts

Corsair Introduces K70 Pro TKL Keyboard With Rapid Trigger

Corsair has just launched a new keyboard aimed at serious gamers, the K70 PRO TKL.…

17 hours ago

Panasonic TB-40S45AEY, S45 Series 40 inch Full HD LED Smart TV

FULL HD PICTURE PERFORMANCE: Elevate your viewing with this LED TV's High Definition resolution and…

17 hours ago

Panasonic TV-40S55AEY, S55 Series 40 inch Full HD LED Smart TV

HD COLOUR ENGINE: Experience vibrant visuals with this LED TV's HD Colour Engine processing chip,…

17 hours ago

suptek 2 Floating Shelf Wall bracket 

Compatibility - The wall mount shelf is compatible with wood and concrete walls. The adjustable…

17 hours ago

Ghostbusters: Frozen Empire

GenreScience FictionFormatDVD-VideoContributorMckenna Grace, Paul Rudd, Kumail Nanjiani, Carrie Coon, Finn WolfhardLanguageEnglishRuntime1 hour and 55 minutes…

17 hours ago

Hisense 55 Inch 144Hz Mini-LED Smart TV

Picture Quality: 240 Mini-LED PRO Local Dimming Zones | Quantum Dot Technology | 144 Hz…

17 hours ago