Some Android phones sold in the US have been found to have a rogue firmware installed on them. The software can collect users' data and send it to a third-party company based in China. The personal data so transmitted includes call logs, text messages, user's location, and app usage data.

Like Us on Facebook

According to a report released by security firm Kryptoware, the company in charge of the rogue firmware stated that the software was created for a Chinese company selling devices in the country. The company named Adups also claims that the firmware was accidently installed on the phones to be sold in the United States.

The complete list of brands affected by this firmware has not been provided. However, at least one brand, BLU, has been identified. The company released a statement saying, "BLU Products has identified and has quickly removed a recent security issue caused by a third-party application." It is likely that nearly 120,000 smartphones were affected before the update to neutralize the firmware was pushed.

Adups also collaborates with other companies such as ZTE and Huawei. Google acknowledged that it was not aware of the issue until it was contacted by security firm Kryptoware. It is believed that the transmitted data was encrypted by Adups during the transit. However, Kryptoware was able to detect the key and decrypt text content.

Kryptoware stated that the incidence strengthens the case for "more transparency at every stage of the supply chain." The security firm said that it has forwarded its findings to the US government. 

TagsAndroid, BLU, Kryptoware