Android: still smartphones infected since their conception in the factory

Society of cyber security Dr Web published last week a list of smartphones Android Chinese infected with malware at the level of their firmware. According to Dr. Web, infections occur during the design of these smartphones.

To infect smartphones Android, cyber criminals have several possible entry doors: applications trapped, malicious links and other techniques are possible. But the safest and most effective is to deliver smartphone user with a malware integrated since its conception.

Dr Web published the week last of several Chinese Android smartphones list containing all malware of type trojan integrated directly in the design of the device. For the user, it is not even necessary to make a mistake or to download a malicious application: the malware is present from the opening of the packaging.

Called Android.triada.231, this malware attacks an Android component known as the Zygote. Zygote is used by Android to manage and compartmentalize the launch of applications on the phone, in order to ensure such an application data are not available to another. Android.Triada.231 is used to install new applications on the phone of the victim, unless it is aware or gives its consent.

But the peculiarity of this malware is the fact that it is present on the phones of their design. Dr. Web explains this malware have been identified in 40 low-cost products in China most Android phones. Dr. Web explains that this list is not exhaustive: according to Russian society, the fault would be a Chinese software publisher having formed several partnerships with manufacturers of infected smartphones.

This would have "asked the addition an application and several software libraries" to its partners in order to integrate their application. Unfortunately, concerned manufacturers apparently have not sought to verify the exact nature of the code delivered by their partner, and just add it to their devices.

The complete list of smartphones infected by this malware and identified by Dr. Web is as follows.

• Leagoo M5
• M5 Leagoo more
• Leagoo M5 Edge
• Leagoo M8
• M8 Pro Leagoo
• Leagoo Z5C
• Leagoo T1 more
• Leagoo Z3C
• Leagoo Z1C
• Leagoo M9
• ARK Benefit M8
• Zopo Speed 7 more
• UHANS A101
• Doogee X 5 Max
• Doogee X 5 Max Pro
• Doogee Shoot 1
• Doogee Shoot 2
• Tecno W2
• Homtom HT16
• Umi London
• Kiano Elegance 5.1
• iLife Fivo Lite
• Mito A39
• Vertex Impress InTouch 4G
• Vertex Impress Genius
• myPhone Hammer Energy
• Advan S5E NXT
• Advan S4Z
• Advan i5E
• STF AERIAL MORE • STF PRO JOY
• Tesla SP6.2
• Cubot Rainbow
• EXTREME 7
• Haier T51
• Cherry Mobile Flare S5
• Cherry Mobile Flare J2S
• Cherry Mobile P1 Flare
• NOA H6
• Pelitt T1 more
• Grace M5 LTE Prestigio
• BQ 5510