Chinese IoT Firm Siphoned Text Messages, Call Records
Summary: Researchers at Kryptowire found that software from Shanghai ADUPS Technology, bundled on cheap Android phones from makers including ZTE, BLU and Huawei, copied all call records and text messages and secretly forwarded them encrypted to a server in Shanghai every 72 hours. ADUPS said it collects device and message information to screen junk texts and calls, that the function was added in June 2016 to some Blu devices, and that it has shipped an update to disable it, while Kryptowire's Azzedine Benameur said the embedded software could re-enable the capability at any time.
What you should know: ADUPS claims more than 700 million active users and firmware integrated into more than 400 operators, vendors and manufacturers spanning phones, cars and televisions, and it has not said how many devices were affected or who had access to the data.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026