{"id":"01M6MYDS92GZGVGPH21VS2GMT0","slug":"blu-r1-hd","vendor":"BLU","oem":"Adups (FOTA component)","model":"R1 HD","hw_revision":null,"category":"phone","country_of_origin":"CN","description":"Budget Android phone sold on Amazon in 2016 whose Adups firmware-update agent sent SMS content, contacts and call logs to a server in Shanghai.","status":"confirmed","status_reason":"Documented by Kryptowire (2016); BLU acknowledged and pushed an update","status_at":1793853867881,"status_manual":1,"report_count":1,"verified_count":1,"created_by":"01M6MYDMJ4H4JTJ0TK8JWT1E1B","created_at":1793851843874,"updated_at":1793853867881,"url":"https://isitspying.com/p/blu-r1-hd","badge":"https://isitspying.com/badge/blu-r1-hd.svg","identifiers":[{"kind":"model_number","value":"BLUR1HD","product_id":"01M6MYDS92GZGVGPH21VS2GMT0","confidence":1,"source":"seed","created_at":1793851844032},{"kind":"model_number","value":"R1HD","product_id":"01M6MYDS92GZGVGPH21VS2GMT0","confidence":1,"source":"seed","created_at":1793851843984}],"findings":[{"kind":"exfiltrates_user_data","severity":"critical","n":1,"verified_n":1},{"kind":"transmits_when_idle","severity":"high","n":1,"verified_n":1}],"contacted_hosts":[],"reports":[{"id":"01M6MYDSK6Y6ZNW0HMZTEWMXWH","url":"https://isitspying.com/r/01M6MYDSK6Y6ZNW0HMZTEWMXWH","status":"verified","verdict":"malicious","summary":"Adups FOTA agent transmitted SMS text, contacts and call logs to a remote server every 72 hours without disclosure","method":"traffic_capture","channel":"api","handle":"isitspying","created_at":1793851844198}],"responses":[],"sources":[{"id":"01M6MYDSGRT5FHG804TWAZ73H2","product_id":"01M6MYDS92GZGVGPH21VS2GMT0","report_id":null,"title":"Kryptowire discovers mobile phone firmware that transmitted personally identifiable information (PII) without user consent or disclosure","url":"https://www.kryptowire.com/adups-security-analysis/","publisher":"Kryptowire","published_at":"2016-11-15","created_at":1793851844120}]}