Options

eBay pulls sales of 'spyware phones'

noise747noise747 Posts: 30,884
Forum Member
✭✭✭
http://www.bbc.co.uk/news/technology-27908105

another reason to buy something that at least have a brand name and not from a Chinese or Russian company.
«1

Comments

  • Options
    JulesandSandJulesandSand Posts: 6,012
    Forum Member
    Still on sale on amazon uk I see.
  • Options
    StigStig Posts: 12,446
    Forum Member
    ✭✭
    noise747 wrote: »
    http://www.bbc.co.uk/news/technology-27908105

    another reason to buy something that at least have a brand name and not from a Chinese or Russian company.

    So this has been going on since August 2013 :o
  • Options
    kidspudkidspud Posts: 18,341
    Forum Member
    ✭✭
    Can someone tell me again about these phones being a bargin.

    Not very good news.
  • Options
    alanwarwicalanwarwic Posts: 28,396
    Forum Member
    ✭✭✭
    I bet you get a similar risk with many a Linux distribution.
    Also that infamous lifetime location tracking used by Apple could have been termed malware.

    That Chinese stuff was adware. Obviously, not knowing your Chinese likely makes it easy to click 'Yes, please install more spamware'.
  • Options
    kidspudkidspud Posts: 18,341
    Forum Member
    ✭✭
    alanwarwic wrote: »
    I bet you get a similar risk with many a Linux distribution.

    Also that infamous lifetime location tracking used by Apple could have been termed malware.

    Only by you. Well done for mentioning apple though. Your obsession continues. :o
  • Options
    alanwarwicalanwarwic Posts: 28,396
    Forum Member
    ✭✭✭
    kidspud wrote: »
    Only by you.....Your obsession continues. :o
    Ain't it a compliment to Apple and yet, on a 'remark' basis..................................
    :eek:

    Yeh, this one is adware.
  • Options
    TheWireRulesTheWireRules Posts: 1,307
    Forum Member
    ✭✭✭
    I've got one of these Star phones :o anyone know more specific details?

    All these apps you download from the Play Store and intrusive and dodgy though. Wanting access to everything.

    Privacy hard to come by in the mobile phone world.
  • Options
    d123d123 Posts: 8,605
    Forum Member
    I've got one of these Star phones :o anyone know more specific details?

    All these apps you download from the Play Store and intrusive and dodgy though. Wanting access to everything.

    Privacy hard to come by in the mobile phone world.

    If you read the BBC article it isn't a dodgy app you may download, it's actually an app installed on the phone in the firmware and cannot be removed.
    A German security firm reported on Tuesday that the Android-powered Star N9500 sent personal data to a computer server in China, adding that the Trojan could not be removed.

    It said the malware was disguised as the legitimate Google Play Store app.


    "The spyware runs in the background and cannot be detected by users," it said.

    "Unbeknownst to the user, the smartphone sends personal data to a server located in China and is able to covertly install additional applications.

    "This makes it possible to retrieve personal data, intercept calls and online banking data, read emails and text messages or control the camera and microphone remotely.

    "The program also blocks the installation of security updates."

    The Associated Press news agency has reported that although several Shenzhen-based firms used eBay and other sites to sell the model, it had been unable to track down the manufacturer.

    Probably a good idea not to use any app in which you have to enter any personal info on that phone (and probably on any number of the other Chinese clone phones).
  • Options
    noise747noise747 Posts: 30,884
    Forum Member
    ✭✭✭
    Stig wrote: »
    So this has been going on since August 2013 :o

    And yet it only really just came to light and Ebay just started to take them off sale? Good grief.
  • Options
    noise747noise747 Posts: 30,884
    Forum Member
    ✭✭✭
    alanwarwic wrote: »
    I bet you get a similar risk with many a Linux distribution.
    Also that infamous lifetime location tracking used by Apple could have been termed malware.

    That Chinese stuff was adware. Obviously, not knowing your Chinese likely makes it easy to click 'Yes, please install more spamware'.

    The only Linux Distro that had some sort of strange spyware stuff in, if you can call it that was Ubuntu, with their link up with Amazon.

    I suppose if you go for one of the lesser known distros or get a distro from a unknown source it may have spyware in.

    All smart phones have some sort of tracking in, that is what they do. I disable a lot of mine, which thankfully you can do.
  • Options
    D_Mcd4D_Mcd4 Posts: 10,438
    Forum Member
    ✭✭
    They must have hoovered up so many people's personal info. :eek: I'd stop using it instantly. Maybe someone will release a custom firmware with it removed. Typical that Amazon marketplace is still selling them. Amazon seen to have no interest in monitoring that.
  • Options
    TelevisionUserTelevisionUser Posts: 41,419
    Forum Member
    Still on sale on amazon uk I see.

    Yep, as we can see here: http://www.amazon.co.uk/s/ref=nb_sb_noss_1?url=search-alias%3Daps&field-keywords=Star%209500%20smartphone

    That is a worrying issue and 10/10 to G DATA for highlighting this matter. I hope that sales of this phone now tank so that it serves as a disincentive to others not to fill phones with spyware.
  • Options
    henrywilliams58henrywilliams58 Posts: 4,963
    Forum Member
    ✭✭✭
    Only just discovered this. I have a Star Note II - Star S7189 Note II 5.5" Screen MTK6589

    I have had it for a year and have never had any Chinese spyware. I factory reset it at the outset - of course this could have included factory spamware.

    There were a couple of Chinese applications which I was able to uninstall or Force Stop.
  • Options
    alanwarwicalanwarwic Posts: 28,396
    Forum Member
    ✭✭✭
    "If the allegations are true, it is not known whether the manufacturer itself would have been aware of what was being done at its plant."
    "The Associated Press news agency has reported that although several Shenzhen-based firms used eBay and other sites to sell the model, it had been unable to track down the manufacturer."
    ""This makes it possible to retrieve personal data, intercept calls and online banking data, read emails and text messages or control the camera and microphone remotely."

    You would hope they would at least join the dots properly. Me, I suspect most 'shoestring' Linux distribution operations are at risk to interference too, at least from government states.
  • Options
    henrywilliams58henrywilliams58 Posts: 4,963
    Forum Member
    ✭✭✭
    These two statements in the BBC release are inconsistent
    It said the malware was disguised as the legitimate Google Play Store app.

    "The spyware runs in the background and cannot be detected by users,"

    If they are seen to be Google Play Apps they can be detected. by users.
  • Options
    Chris1973Chris1973 Posts: 670
    Forum Member
    ✭✭
    If they are seen to be Google Play Apps they can be detected. by users.

    All of the spyware files are located in the system/app folder which you normally wouldn't be able to access or install / uninstall unless the phone has been rooted.
    That is a worrying issue and 10/10 to G DATA for highlighting this matter.

    They may have highlighted it to the press and the population in general, but the spyware infestation on the N9500 had been discovered and was actively being discussed on forums as early as August 2013, and in relation to one other earlier Star Model it was also suspected to be happening in some capacity right back to 2012 - I've linked to both discussions already on the other thread.
  • Options
    D_Mcd4D_Mcd4 Posts: 10,438
    Forum Member
    ✭✭
    Yep, as we can see here: http://www.amazon.co.uk/s/ref=nb_sb_noss_1?url=search-alias%3Daps&field-keywords=Star%209500%20smartphone

    That is a worrying issue and 10/10 to G DATA for highlighting this matter. I hope that sales of this phone now tank so that it serves as a disincentive to others not to fill phones with spyware.

    Most of the listings on Amazon seem to have been pulled. I can only see one for sale now.
  • Options
    alanwarwicalanwarwic Posts: 28,396
    Forum Member
    ✭✭✭
    Talking of so called spyware, Microsoft and Android are following by installing a kill switch in their phones.

    The only real way they can do that is via a 'command and control' type thing.
    Google, Microsoft have to know who,where you are, so it has to be done via 'spying'. It will be the same for Apple and their kill method
  • Options
    henrywilliams58henrywilliams58 Posts: 4,963
    Forum Member
    ✭✭✭
    Chris1973 wrote: »
    All of the spyware files are located in the system/app folder which you normally wouldn't be able to access or install / uninstall unless the phone has been rooted.


    They may have highlighted it to the press and the population in general, but the spyware infestation on the N9500 had been discovered and was actively being discussed on forums as early as August 2013, and in relation to one other earlier Star Model it was also suspected to be happening in some capacity right back to 2012 - I've linked to both discussions already on the other thread.

    Please explain what rooting is - in beginners language. Sounds like formatting.

    How can I "format" and install a generic Android 4.2.2?

    I have a Star S7189 Note II . Is that the "earlier Star model" ?
  • Options
    TelevisionUserTelevisionUser Posts: 41,419
    Forum Member
    alanwarwic wrote: »
    "If the allegations are true, it is not known whether the manufacturer itself would have been aware of what was being done at its plant."
    "The Associated Press news agency has reported that although several Shenzhen-based firms used eBay and other sites to sell the model, it had been unable to track down the manufacturer."
    ""This makes it possible to retrieve personal data, intercept calls and online banking data, read emails and text messages or control the camera and microphone remotely."

    You would hope they would at least join the dots properly. Me, I suspect most 'shoestring' Linux distribution operations are at risk to interference too, at least from government states.

    Very few, and none of the popular, Linux distributions are put together in Russia or China plus the community of Linux activist developers would soon highlight any such malpractice. Furthermore, it's not Linux that has the NSA "backdoor": NSA Built Back Door In All Windows Software by 1999 (Linus Torvalds refused, when requested, to put an NSA backdoor into the Linux kernel http://www.omgubuntu.co.uk/2013/11/nsa-ask-linus-torvalds-include-backdoors-linux-father-says-yes)
  • Options
    alanwarwicalanwarwic Posts: 28,396
    Forum Member
    ✭✭✭
    That just shows how easy it is to pay one person to pop dodgy code in,
    That Goto Code and the SSL things were prime candidates for classification as 'malware' .

    Someone need to update the story with detail on clean ROMs, the actual guilty parties etc etc. I'm sure there is much truth in the story but it was certainly sloppy reading.
  • Options
    henrywilliams58henrywilliams58 Posts: 4,963
    Forum Member
    ✭✭✭
    alanwarwic wrote: »
    That just shows how easy it is to pay one person to pop dodgy code in,
    That Goto Code and the SSL things were prime candidates for classification as 'malware' .

    Someone need to update the story with detail on clean ROMs, the actual guilty parties etc etc. I'm sure there is much truth in the story but it was certainly sloppy reading.

    It could also be wildly exaggerated by G Data the German firm that stands to make most out of this.

    It could be result of clicking on one of the Chinese apps rather than a general problem with the phones.

    Do all Star phones have this malware? Do all Star 9500 have this malware?

    I only use apps downloaded from Google Play and have uninstalled all the Chinese apps as far as I am aware.
  • Options
    jabbamk1jabbamk1 Posts: 8,942
    Forum Member
    Some Star phones have this.

    I've known about it for a while now so not sure why it's suddenly become this big thing.

    First thing I did when I got my Star dual sim phone was delete the malware.
  • Options
    henrywilliams58henrywilliams58 Posts: 4,963
    Forum Member
    ✭✭✭
    jabbamk1 wrote: »
    Some Star phones have this.

    I've known about it for a while now so not sure why it's suddenly become this big thing.

    First thing I did when I got my Star dual sim phone was delete the malware.

    How did you spot the malware? The Chinese stuff? I didn't like the look of MoboPLayer.
Sign In or Register to comment.