Spyware on millions of android phones. - GoFuckYourself.com

u-Bob · 11-30-2011, 02:29 PM

http://www.zdnet.com/blog/apple/htc-...ser-data/11792

Quote:

HTC rootkit discovered phoning home with user data

Summary: Locationgate is nothing compared to a rootkit that?s been discovered pre-installed on potentially millions of Android handsets.

HTC rootkit discovered pre-installed on Android handsets

Remember Locationgate? Well, that might be nothing compared to a rootkit that?s been discovered pre-installed on some Android handsets.

[The Locationgate scandal erupted in April 2011 when a hidden file called ?consolidated.db? (containing a database of Wi-Fi hotspots and cell towers around your phone's location) was discovered unencrypted in iOS 4.]

Well, at least consolidated.db didn?t phone home and report your whereabouts to the mothership ? which is what appears to be happening on millions of Android handsets.

In this video, 25-year-old security researcher Trevor Eckhart of Connecticut shows how two nefarious apps (HTC IQAgent and IQRD) are discovered pre-loaded and running on his HTC smartphone.

Eckhart demonstrates how the surreptitious apps log text messages, encrypted web searches ? and just about everything else ? and send the data to Carrier IQ?s servers.

Worse, Wired reports that the rootkit can?t be turned off without rooting the phone and replacing the operating system. ?And even if you stop paying for wireless service from your carrier and decide to just use Wi-Fi, your device still reports to Carrier IQ.?

Luckily, Logging Checker (main site) is an Android app by TrevE that tests to see if your device is among the afflicted. Here?s a screenshot:

http://www.wired.com/threatlevel/201...logging-video/
http://www.wired.com/threatlevel/201...tkit-brouhaha/

Chosen · 12-01-2011, 01:14 AM

Oh fuck...

Mr Pheer · 12-01-2011, 01:46 AM

Should be some nice lawsuits.

seeandsee · 12-01-2011, 04:10 AM

oh great, HTC to pay for this sin big

candyflip · 12-01-2011, 06:21 AM

Sprint and Samsung have something similar. I use a custom ROM that has all that crap removed. I would suggest doing the same.

12-01-2011, 04:10 AM	#4
seeandsee Check SIG! Industry Role: Join Date: Mar 2006 Location: Europe (Skype: gojkoas) Posts: 50,945	oh great, HTC to pay for this sin big __________________ BUY MY SIG - 50$/Year Contact here

12-01-2011, 06:21 AM	#5
candyflip Carpe Visio Industry Role: Join Date: Jul 2002 Location: New York Posts: 43,057	Sprint and Samsung have something similar. I use a custom ROM that has all that crap removed. I would suggest doing the same. __________________ Spend you some brain. Email Me

12-01-2011, 01:14 AM	#2
Chosen VIPPay.com \| AdultWebSponsors.com Industry Role: Join Date: Aug 2001 Posts: 63,151	Oh fuck...

12-01-2011, 01:46 AM	#3
Mr Pheer I got bored here. Industry Role: Join Date: Dec 2002 Location: Las Vegas Posts: 20,808	Should be some nice lawsuits.