Connect with us

Mobile Services

Transsion ships handsets with pre-installed malware

Published

on

NEW DELHI: Pre-installed malware signing mobile users up to subscription services without their permission has been seen on thousands of low cost devices made by Chinese manufacturer, Transsion.

That’s according to new findings released by Secure-D, Upstream’s full stack anti-fraud platform, following a full investigation into the origin of the detected suspicious transactions.

Secure-D caught and blocked an unusually large number of transactions coming from Transsion Tecno W2 handsets mainly in Ethiopia, Cameroon, Egypt, Ghana, and South Africa, with some fraudulent mobile transaction activity detected in another 14 countries. To date, a total of 19.2m suspicious transactions – which would have secretly signed users up to subscription services without their permission – have been recorded from over 200k unique devices.

Secure-D’s further investigation discovered components of the xHelper/Triada malware preinstalled on 53k Transsion’s Tecno W2 smartphones, a low-cost handset model typically bought by those on a lower income.

Geoffrey Cleaves, Head of Secure-D at Upstream, commented: “This particular threat takes advantage of those most vulnerable. The fact that the malware arrives pre-installed on handsets that are bought in their millions by typically low-income households tells you everything you need to know about what the industry is currently up against.”

Based in Shenzhen, China, Transsion Holdings is one of the country’s leading mobile phone manufacturers, selling 124 million mobile phones globally in 2018 according to its own company data. Its handsets are prevalent in emerging markets, especially in Africa, where according to IDC it is the top selling mobile phone manufacturer. Its Tecno, Infinix and Itel brands held a combined 40.6% share in the African smartphone market and a 69.5% share in the feature phone market during the last quarter of 2019. Transsion manufactured handsets can also be found in many Asian countries.

Triada malware acts as a software backdoor and malware downloader. It installs a trojan (a piece of malicious code designed to look normal) known as “xHelper” onto compromised devices. The xHelper trojan persists across reboots, app removals and even factory resets, making it extremely difficult to deal with even for experienced professionals, let alone the average mobile user. When exposed to the right environment, for example, a particular phone network, xHelper components can make queries to find new subscription targets and submit fraudulent subscription requests on behalf of the phone’s unsuspecting owner.

These requests are automatic – meaning they do not require the phone owner’s permission – and invisible. Had they been successful, they would have consumed each user’s pre-paid airtime – the only way to pay for digital products in many emerging markets.

Secure-D’s investigation found evidence in code and from traffic data to link at least one of the xHelper components (known as “com.mufc.umbtts”) to subscription fraud requests via Transsion’s W2 Tecno-branded handset, which runs on Android OS. In the period under investigation Secure-D detected and blocked nearly 800k xHelper suspicious requests from W2 devices.

Google, developers of Android OS, has attributed the presence of the Triada malware to the actions of a malicious supplier somewhere within the supply chain of affected devices.

No signs of Triada malware were found to affect other mobile phone models created by Transsion.

Geoffrey Cleaves, from Upstream, said: “Mobile ad fraud is fast becoming an epidemic which, if left unchecked, will throttle mobile advertising, erode trust in operators and leave users saddled with higher bills. A unified approach is needed to raise awareness.”

A report published by Upstream at the beginning of 2020 revealed that last year a staggering 93% of mobile transactions had been blocked by Secure-D as fraudulent. Over 98,000 malicious Android apps were discovered, as well as 43 million infected devices in 20 different countries. Secure-D currently covers 31 mobile operators across 20 countries.

Continue Reading
Advertisement
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

5g

Airtel announces its largest ever 5G roll-out in 125 cities

Published

on

NEW DELHI: Bharti Airtel, India’s telecommunications services provider, today announced the launch of its ultra-fast 5G services in 125 cities. Airtel 5G Plus service is now available to customers in over 265 cities in the country.

Airtel 5G Plus has three compelling advantages for customers. First, it runs on a technology that has the widest acceptance in the world with the most developed ecosystem. This ensures that all 5G smartphones in India seamlessly work on the Airtel network. Second, the company promises to deliver the best experience – between 20 to 30 times higher speeds than today coupled with brilliant voice experience and super-fast call connect. Finally, Airtel 5G Plus network will also be kinder to the environment with its special power reduction solution. Powered by the reliable Airtel network infrastructure, Airtel 5G Plus will provide superfast access to High-Definition video streaming, gaming, multiple chatting, instant uploading of photos et all.

Commenting on the launch, Randeep Sekhon, CTO, Bharti Airtel said, “5G has revolutionized the world of internet, ushering new era of connectivity and communications that will prove to be a game-changer for the country. At Airtel, we remain committed to delivering the highest quality of network and service to our customers as we roll-out 125 more cities today. Airtel was the first in the country to offer 5G services in October 2022, and today’s mega launch is our promise to connect every Airtel customer in the country with ultra-fast Airtel 5G Plus. Our 5G rollout is on track to cover all towns and key rural areas by March 2024.”

Airtel 5G Plus service availability will continue to rapidly expand – including service in all towns and villages in the country soon – as the company is working towards offering nationwide coverage. Airtel is now offering its 5G services in every major city from the upper northern city of Jammu to the southern tip of Kanyakumari.

In the last one year, Airtel has demonstrated the power of 5G with a host of powerful use cases that will change the way customers lead their lives and do business. From India’s first live 5G network in Hyderabad to India’s first private 5G network at the BOSCH facility in Bengaluru to partnering with Mahindra & Mahindra to make its Chakan manufacturing facility, India’s first 5G enabled auto manufacturing unit, Airtel has been at the forefront of 5G innovation.

Continue Reading

5g

Apple rolls out beta programme for iPhones to enable 5G services

Published

on

 

NEW DELHI: Apple Inc has rolled out a beta programme to enable 5G on Apple devices as the upgrade lets users try out pre-release software.

This software upgrade enables 5G access on Apple devices, as and when service providers Jio, Airtel and Vodafone enable 5G network access, sources said.

Apple Users have to enrol for the Beta Programme on the website, install a profile and download the software.

Jio users using iPhone 12 and above, in cities where JioTrue5G has been rolled out, will be invited to the Jio Welcome Offer. Jio Welcome Offer provides unlimited 5G data at up to 1 Gbps speed to users at no additional cost. However, there is a condition that prepaid users must be on active Rs 239 and above plan. All Postpaid users are eligible for this trial.

Airtel is not providing any special 5G offer like Jio to their users. In the cities/areas in which the Airtel 5G network has been launched, users can trial 5G services as a part of their existing plan, once they have updated the latest Apple Beta software.

While an email sent to Apple did not solicit an immediate response, the firm had last month stated: “We are working with our carrier partners in India to bring the best 5G experience to iPhone users as soon as network validation and testing for quality and performance is completed. 5G will be enabled via a software update and will start rolling out to iPhone users in December”.

Airtel and Jio customers on iPhone 14, iPhone 13, iPhone 12 and iPhone SE (3rd generation) models can experience 5G as part of Apple’s iOS 16 Beta Software Program. The Apple Beta Software Program is open to anyone with a valid Apple ID who accepts the Apple Beta Software Program Agreement during the sign-up process.

If a user has an iCloud account, that is an Apple ID, it is recommended they use that. If they do not have an iCloud account or any other Apple ID, they can create one.

Customers who want to try the beta software should back up their iPhones before installing the beta software. It is recommended to install the beta software only on non-production devices that are not business-critical. Users can also provide feedback to Apple on quality and usability, which helps Apple identify issues, fix them, and make Apple software even better.

The iOS beta comes with the built-in Feedback Assistant app, which can be opened from the Home screen on the iPhone or iPad or from the Dock on the Mac.

Source: Press Trust of India

 

Continue Reading

5g

Nokia wins multi-year deal with Reliance Jio India to build one of the largest 5G networks in the world

Published

on

NEW DELHI: Nokia has announced that it has been selected as a major supplier by Reliance Jio to supply 5G Radio Access Network (RAN) equipment from its comprehensive AirScale portfolio countrywide in a multi-year deal. Reliance Jio is India’s number one mobile operator and has one of the largest RAN footprints in the world.

Under the contract, Nokia will supply equipment from its AirScale portfolio, including base stations, high-capacity 5G Massive MIMO antennas, and Remote Radio Heads (RRH) to support different spectrum bands, and self-organizing network software. Reliance Jio plans to deploy a 5G standalone network which will interwork with its 4G network. The network will enable Reliance Jio to deliver advanced 5G services such as massive machine-to-machine communications, network slicing, and ultra-low-latency.

Akash Ambani, Chairman Reliance Jio, commented: “We are pleased to be working with Nokia for our 5G SA deployment in India. Jio is committed to continuously investing in the latest network technologies to enhance the experience of all of its customers. We are confident that our partnership with Nokia will deliver one of the most advanced 5G networks globally.”

Pekka Lundmark, President and CEO at Nokia stated: “This is a significant win for Nokia in an important market and a new customer with one of the largest RAN footprints in the world. This ambitious project will introduce millions of people across India to premium 5G services, enabled by our industry-leading AirScale portfolio. We are proud that Reliance Jio has placed its trust in our technology and we look forward to a long and productive partnership with them.”

Nokia has a long-standing presence in India. This new deal will mean that Nokia is now supplying India’s three largest mobile operators.

Continue Reading

Trending