Adware discovered on dozens of no-name Android phones

Posted on Thursday, December 15 2016 @ 13:46 CET by Thomas De Maesschalck
Via numerous e-commerce websites as well as marketplaces like eBay and AliExpress you can easily find smartphones that are significantly cheaper than what you'd pay for a phone with similar specifications from a well-known brand. A lot of Chinese brands have captured a widely following as they deliver a very good price/performance ratio, but unfortunately not all of them can be trusted.

A new report by anti-virus firm Doctor Web claims they discovered 26 cheap phones that come pre-loaded with a downloader named Android.DownLoader.473.origin. This piece of software can download benign applications but also malicious and unwanted ones, including adware. The company also discovered another preinstalled downloader dubbed Android.Sprovider.7, this one has the ability to make phone calls to certain numbers and to show ads on top of apps.
"It is known that cybercriminals generate their income by increasing application download statistics and by distributing advertising software," the security researchers wrote. "Therefore, Android.DownLoader.473.origin and Android.Sprovider.7 were incorporated into Android firmware because dishonest outsources who took part in creation of Android system images decided to make money on users."
Here's an overview of affected smartphones. Probably the biggest surprise are the two Lenovo devices on the list, these contained the Android.Sprovider.7 trojan. A quick Google search of various models mostly turned up Russian sites so the odds of coming across these phones in other geographies are pretty low.
  • MegaFon Login 4 LTE
  • Irbis TZ85
  • Irbis TX97
  • Irbis TZ43
  • Bravis NB85
  • Bravis NB105
  • SUPRA M72KG
  • SUPRA M729G
  • SUPRA V2N10
  • Pixus Touch 7.85 3G
  • Itell K3300
  • General Satellite GS700
  • Digma Plane 9.7 3G
  • Nomi C07000
  • Prestigio MultiPad Wize 3021 3G
  • Prestigio MultiPad PMT5001 3G
  • Optima 10.1 3G TT1040MG
  • Marshal ME-711
  • 7 MID
  • Explay Imperium 8
  • Perfeo 9032_3G
  • Ritmix RMD-1121
  • Oysters T72HM 3G
  • Irbis tz70
  • Irbis tz56
  • Jeka JK103
  • Lenovo A319
  • Lenovo A6000
  • logo

    Source: ARS Technica


    About the Author

    Thomas De Maesschalck

    Thomas has been messing with computer since early childhood and firmly believes the Internet is the best thing since sliced bread. Enjoys playing with new tech, is fascinated by science, and passionate about financial markets. When not behind a computer, he can be found with running shoes on or lifting heavy weights in the weight room.



    Loading Comments