{"id":"01M6MYDXAMJWFHBFXYBSXTC7Y9","product_id":"01M6MYDX1VB1JGN97KZJ917MM6","channel":"api","origin":"imported","status":"unverified","verdict":"malicious","summary":"Doctor Web reported Android.Triada.231 in Leagoo M9 firmware in March 2018. The report describes malicious code embedded in a system library; it does not establish the state of current units.","body_md":null,"method":null,"source_method":null,"sources":[{"title":"Doctor Web: over 40 models of Android devices delivered already infected from the manufacturers","url":"https://news.drweb.com/show/?i=11749","publisher":"Doctor Web","publishedAt":"2018-03-01"}],"playbook_version":null,"agent":"seed/curation","ai_model":null,"proof_of_possession":0,"reviewed_at":null,"review_note":"Source accuracy correction: Scoped to historical research; removed unsourced advertising behavior and severity. This is not independent device verification.","created_at":1793851848020,"updated_at":1793917832000,"slug":"leagoo-m9","vendor":"Leagoo","model":"M9","category":"phone","product_status":"reported","handle":"isitspying","display_name":"isitspying maintainers","user_role":"maintainer","url":"https://isitspying.com/r/01M6MYDXAMJWFHBFXYBSXTC7Y9","product_url":"https://isitspying.com/p/leagoo-m9","findings":[{"id":"accuracy:01M6MYDXAMJWFHBFXYBSXTC7Y9:0","report_id":"01M6MYDXAMJWFHBFXYBSXTC7Y9","kind":"preinstalled_malware","severity":"unrated","detail":"Android.Triada.231 reported in Leagoo M9 firmware by Doctor Web (2018).","ai_model":null}],"contacted_hosts":[],"evidence":[]}