Xiaomi Mi4 LTE Sold with Dodgy Apps Pre-Installed, Rooted

  • 5 March 2015
  • 1 reply
  • 491 views

Userlevel 7
Badge +54
By Ionut Ilascu    5 Mar 2015
 
Reported OS version included elements from earlier releases
 
The highly popular Mi4 LTE Android smartphone produced by Xiaomi has been found to be shipped from the factory with serious security risks that range from pre-loaded risky apps to root and a shady flavor of the underlying Android operating system.
 
The demand for Xiaomi devices has grown lately and the Mi4 LTE smartphone seems to attract a large number of customers. In mid-February, 25,000 units sold out in 15 seconds on India’s online retailer Flipkart.
 

Apps detected as malware found in default configuration

 
However, it appears that at least the versions sold in China are filled with enough security problems to make a customer think twice about purchasing it.
 
Full Article

1 reply

Userlevel 7
By Manish Singh
 
Updated at 18:00 IST: Bluebox and Xiaomi are now confirming that the handset the security firm tested was a counterfeit product purchased through an unofficial channel. You can read Xiaomi's full statements below.
Xiaomi’s Mi 4 is one of the best smartphones you cannot purchase so easily -- but it might be for the best, it seems. Don’t get me wrong: The Mi 4 packs in top-of-the-line specifications, the latest Android-based operating system, and is incredibly cheap, but if data security firm Bluebox's latest report is to be believed, it also comes with malware and a host of other issues. The handset seems to have been tampered with by an unidentified third party, however. We’ll have more details on this later today.
 The security firm has flagged the handset by the Chinese smartphone manufacturer for a number of reasons including issues like pre-installed malware and an adware that disguises itself as a verified Google application, and vulnerability to several flaws. Furthermore, the operating system running on the Xiaomi’s smartphone is a non-certified version of Android. “[Xiaomi Mi 4’s] vulnerable to every vulnerability we scanned for”, wrote Andrew Blaich, lead security expert at Bluebox.
 
full article

Reply