This site may earn affiliate commissions from the links on this folio. Terms of use.

The chances of picking upwardly malware on a mainstream Android phone with default settings are extremely low, merely there are uncountable Android devices in the globe. Not all those phones are entirely trustworthy, either. Some trivial-known phones have shown upwards with pre-installed malware thanks to unscrupulous suppliers or manufacturers. One such device has appeared in the US, and information technology'south being promoted equally part of a regime program. Oops.

The smartphone in question is the Unimax (UMX) U686CL, which you've almost likely never come across. It runs Android eight.1 Go Edition with 1GB of RAM, 8GB of storage, and a removable 2,000mAh bombardment. It's an extremely cheap telephone offered on Virgin Mobile's Assurance Wireless program. That's role of the United states of america regime'south Lifeline Assistance Program, which is aimed at helping low-income families afford mobile service. Qualifying customers tin can get the phone for as little as $35, but they're as well getting some potentially nasty malware.

According to Malwarebytes, the Unimax U686CL comes with our old friend Adups pre-installed. You might remember Adups from the Amazon-exclusive Blu R1 Hard disk drive, a phone that made waves for its ultra-low $fifty price tag. Adups is a firmware OTA update service, just it as well has extensive access to the device. The visitor feigned innocence when called out for the Blu phone, only hither information technology is with more sketchy behavior on the U686CL.

The Unimax U683CL listed on the Assurance Wireless site.

Adups has the power to install applications on the phone remotely with no user interaction. That lonely makes information technology dangerous, though non explicitly malware. However, it appears someone is using Adups to push specific malware applications to the phone. The worst part is y'all tin can't uninstall Adups considering it's a system app.

Malwarebytes has confirmed that, if left to its own devices, Adups volition install a piece of malware called HiddenAds (Trojan.HiddenAds.WRACT). Equally the name implies, information technology exists to harass users with pop-up ads that earn money for the operators. Users can uninstall this app if they've savvy enough — Malwarebytes has instructions. However, there'south nothing to stop it from reappearing because the Adups software remains active.

Unfortunately, Assurance Wireless has issued a completely tone-deafened response. It says it is in communication with Unimax to empathise the root cause of the issue. However, information technology does not believe the applications in question qualify as malware. Anyone using this device should probably commencement looking for an alternative.

Now read:

  • The Rising of Skywalker Is Beingness Used to Push button Malware Downloads, Surprising No 1
  • China Is Installing Android Malware on Tourists' Phones
  • Mozilla Issues Emergency Zero-Day Firefox Patch