BLU R1 HD
Confirmed Documented by Kryptowire (2016); BLU acknowledged and pushed an update · since 2026-11-05
A maintainer confirmed the finding, or it is tied to a published CVE or writeup.
Budget Android phone sold on Amazon in 2016 whose Adups firmware-update agent sent SMS content, contacts and call logs to a server in Shanghai.
Identity
- Brand
- BLU
- OEM
- Adups (FOTA component)
- Model
- R1 HD
- Made in
- CN (metadata, not a finding)
- Reports
- 1 total · 1 verified
Identifiers
| model_number | BLUR1HD, R1HD |
Check yours
Own one? Run the Trust Check and your report either corroborates or contradicts what's here. Both are useful.
claude mcp add --transport http isitspying https://mcp.isitspying.com/mcpThen ask: “Run a Trust Check on my BLU R1 HD.” Or file a report with photos.
Findings
| Finding | Max severity | Reports | Verified |
|---|---|---|---|
| Exfiltrates user data | critical | 1 | 1 |
| Transmits while idle | high | 1 | 1 |
Published sources
- Kryptowire discovers mobile phone firmware that transmitted personally identifiable information (PII) without user consent or disclosure · Kryptowire · 2016-11-15
Reports · 1
- Malicious verified Adups FOTA agent transmitted SMS text, contacts and call logs to a remote server every 72 hours without disclosure
traffic_capture · via api · by isitspying maintainers maintainer · 4h ago
Responses & disputes · right of reply
None yet.
Post a vendor response, dispute, or corroboration
Sign in to post.
Takedown or legal: takedown@isitspying.com. See how we handle disputes.
Embed the status
<a href="https://isitspying.com/p/blu-r1-hd"><img src="https://isitspying.com/badge/blu-r1-hd.svg"></a>
JSON: /api/products/blu-r1-hd · or request this page with Accept: application/json.