28 Android phones including Lenovo models found to ship with malware

7548102540_8d7fa706e7_o1

New research has found that 28 Android phones ship from the factory with preinstalled malware that can hijack a phone, install adware and other forms of malware.

The phones were discovered with the malicious apps by security researchers with Russian antivirus firm Dr. Web, which found that the phones had downloader malware installed in firmware. While most of the phones were cheaper models made by little-known Chinese brands, included on the list were two Lenovo Android devices, the A319 and A6000 smartphones.

The Lenovo phones were found to be infected with Android.Sprovider.7, a Trojan that is incorporated into the Rambla application which provides access to the Android software catalog. The malware is said to be able to download an APK file and install it.

It can then run an installed application, open a link in a browser, make a phone call, run a standard phone application, show advertisements in the status bar and and create a shortcut on the home screen. A form of malware found on other devices, Android.DownLoader.473.origin, is able to download and installs additional apps when the device uses Wi-Fi to connect to the internet.

Dr. Web warned that cybercriminals are using malware such as these two types to fraudulently boost application download statistics and distribute adware. “Therefore, Android.DownLoader.473.origin and Android.Sprovider.7 were incorporated into Android firmware because dishonest outsourcers who took part in creation of Android system images decided to make money on users,” the researchers noted.

Dr. Web recommended that users of the infected devices should contact technical support specialists to get updated system software as soon as it is ready. Here’s the full list of infected phones:

  • MegaFon Login 4 LTE
  • Irbis TZ85
  • Irbis TX97
  • Irbis TZ43
  • Bravis NB85
  • Bravis NB105
  • SUPRA M72KG
  • SUPRA M729G
  • SUPRA V2N10
  • Pixus Touch 7.85 3G
  • Itell K3300
  • General Satellite GS700
  • Digma Plane 9.7 3G
  • Nomi C07000
  • Prestigio MultiPad Wize 3021 3G
  • Prestigio MultiPad PMT5001 3G
  • Optima 10.1 3G TT1040MG
  • Marshal ME-711
  • 7 MID
  • Explay Imperium 8
  • Perfeo 9032_3G
  • Ritmix RMD-1121
  • Oysters T72HM 3G
  • Irbis tz70
  • Irbis tz56
  • Jeka JK103
  • Lenovo A6000
  • Lenovo A319
Image credit: 21986855@N07/Flickr/CC by 2.0