{"id":"01M6MYDT1S8ZYECJ7RJSYPSWQ3","slug":"gigaset-gs270","vendor":"Gigaset","oem":null,"model":"GS270","hw_revision":null,"category":"phone","country_of_origin":"DE","description":"Android phone that received malware (Android.RemoteCode / Trojan droppers) through the manufacturer's compromised update server in April 2021.","status":"confirmed","status_reason":"Vendor confirmed the compromised update server (April 2021)","status_at":1793853868138,"status_manual":1,"report_count":1,"verified_count":1,"created_by":"01M6MYDMJ4H4JTJ0TK8JWT1E1B","created_at":1793851844665,"updated_at":1793853868138,"url":"https://isitspying.com/p/gigaset-gs270","badge":"https://isitspying.com/badge/gigaset-gs270.svg","identifiers":[{"kind":"model_number","value":"GS270","product_id":"01M6MYDT1S8ZYECJ7RJSYPSWQ3","confidence":1,"source":"seed","created_at":1793851844780}],"findings":[{"kind":"preinstalled_malware","severity":"critical","n":1,"verified_n":1}],"contacted_hosts":[],"reports":[{"id":"01M6MYDTA9B3CJ27RYYQDAXYGQ","url":"https://isitspying.com/r/01M6MYDTA9B3CJ27RYYQDAXYGQ","status":"verified","verdict":"malicious","summary":"Update server compromise pushed a malicious 'update' app that installed further malware and sent SMS; vendor confirmed and fixed","method":"app_analysis","channel":"api","handle":"isitspying","created_at":1793851844937}],"responses":[],"sources":[{"id":"01M6MYDT7VQEXG6M3YAV9K6CTJ","product_id":"01M6MYDT1S8ZYECJ7RJSYPSWQ3","report_id":null,"title":"Pre-installed auto installer threat found on Android mobile devices in Germany","url":"https://www.malwarebytes.com/blog/news/2021/04/pre-installed-auto-installer-threat-found-on-android-mobile-devices-in-germany","publisher":"Malwarebytes Labs","published_at":"2021-04-06","created_at":1793851844859}]}