{"id":"01M6MYEA01PSH38SCYPT4ZAYVW","slug":"xplora-x4","vendor":"Xplora","oem":null,"model":"X4","hw_revision":null,"category":"wearable","country_of_origin":"CN","description":"Children's smartwatch. mnemonic (2020) found a remotely activatable 'Persistent Connection Service' from Qihoo 360 in the firmware that could capture location, audio and photos via SMS commands.","status":"confirmed","status_reason":"mnemonic disclosure, Oct 2020; vendor patched","status_at":1793853874320,"status_manual":1,"report_count":1,"verified_count":1,"created_by":"01M6MYDMJ4H4JTJ0TK8JWT1E1B","created_at":1793851860993,"updated_at":1793853874320,"url":"https://isitspying.com/p/xplora-x4","badge":"https://isitspying.com/badge/xplora-x4.svg","identifiers":[{"kind":"model_number","value":"X4","product_id":"01M6MYEA01PSH38SCYPT4ZAYVW","confidence":1,"source":"seed","created_at":1793851861117},{"kind":"model_number","value":"XPLORAX4","product_id":"01M6MYEA01PSH38SCYPT4ZAYVW","confidence":1,"source":"seed","created_at":1793851861167}],"findings":[{"kind":"preinstalled_malware","severity":"high","n":1,"verified_n":1},{"kind":"undisclosed_radio","severity":"low","n":1,"verified_n":1}],"contacted_hosts":[],"reports":[{"id":"01M6MYEAAV82ZME9ZHQ6K5K85F","url":"https://isitspying.com/r/01M6MYEAAV82ZME9ZHQ6K5K85F","status":"verified","verdict":"suspicious","summary":"Firmware contained a dormant Qihoo 360 service able to take photos, record audio and report location on receipt of encrypted SMS commands; vendor removed it in an update","method":"firmware_dump","channel":"api","handle":"isitspying","created_at":1793851861339}],"responses":[],"sources":[{"id":"01M6MYEA81E8B69V41B32X94Q4","product_id":"01M6MYEA01PSH38SCYPT4ZAYVW","report_id":null,"title":"Backdoor in kids' smartwatch makes it a remote surveillance device","url":"https://www.mnemonic.io/resources/blog/backdoor-in-kids-smartwatch-makes-it-a-remote-surveillance-device/","publisher":"mnemonic","published_at":"2020-10-12","created_at":1793851861249}]}