Chinese Smartphones a Security Threat, says IAF

Status
Not open for further replies.

tapoo

Level 4
Thread author
Verified
Jan 21, 2012
639
NEW DELHI: China-based leading smartphone manufacturer Xiaomi, which recently marked a successful entry into the Indian market, is allegedly a security threat. It has been accused by the Indian Air Force (IAF) of sending user data to remote servers located in China. Simply put, it is a charge that amounts to spying.

In an alert issued to air warriors and their family members, the IAF has claimed that smartphones and note books manufactured by Xiaomi have been found to send users’ private data from these devices to servers based in Beijing. The IAF alert, accessed by The Sunday Standard, has come with ‘medium’ severity rating, which is considered serious according to an IAF official.

The same company is also facing an investigation in Taiwan for alleged cyber security threat last month and the Taiwan government is in the process of taking decision to ban the company.

The IAF note, which was prepared by the intelligence unit based on the inputs from Indian Computer Emergency Response Team (CERT-In), has also mentioned cases of Xiaomi mobile phones sending users’ data to its masters in China.

“F-secure, a leading security solution company, recently carried out a test of Xiaomi Redmi 1s, the company’s budget smartphone, and found that the phone was forwarding carrier name, phone number, IMEI (the device identifier) plus numbers from address book and text messages back to Beijing,” the IAF note says.

While mentioning another incident, the IAF note says, “A Hong Kong-based mobile phone user claims to have tested the Redmi Note smartphone and found it was automatically connected to an IP address hosted in China. The data transmitted included photo in media storage and SMSs also.”

Quoting a reader from PhoneArena website who pointed out that the Chinese Government may be involved, the IAF note added, “According to the PhoneArena report, looking up the website of the company owning the IP address in the range 42.62.48.0-42.62.48.255 reveals that the website owner is www.cnnic.cn. CNNIC is the administrative agency responsible for Internet affairs under the Ministry of Information Industry of People’s Republic of China. It is based in the Zhongguancun high tech district of Beijing.”

Therefore, the IAF in its alert to all of its Commands and Squadrons has stated that air warriors and their family members are advised to refrain from using these mobile devices.

When this paper sought the company’s response, a representative from Xiaomi replied that they will respond as soon as relevant information is available. “Your mail has been forwarded to the relevant colleagues for their appropriate handling. We will respond as soon as relevant information is available,” Xiaomi India customer care replied.

A few months back, the office of the Doctorate General of Military Operations of the Indian Army had issued a similar alert of security threat from a Chinese mobile application. The Army went on to say that “every Internet company and telecom operator in China, both foreign and domestic, is held legally liable for all content shared through their platforms.”

The Army has also claimed that the location-sharing feature of applications may be fraudulently used to track and target people, especially those working in defence, scientific, industrial research or other government sector.

The development is a reminder of the scrutiny Chinese technology firms are subject to abroad, as governments become increasingly wary of potential cyber security threats from the world’s second-biggest economy.

http://www.newindianexpress.com/the...Threat-says-IAF/2014/10/19/article2484248.ece

http://businesstoday.intoday.in/sto...rns-against-using-xiaomi-phones/1/211629.html
.
 

VirusAttak

Level 4
Verified
Aug 31, 2014
182
Once i thought to buy one ...
they are selling it too cheap so they can sell user data to chinese government ? :eek:
 

tapoo

Level 4
Thread author
Verified
Jan 21, 2012
639
http://www.reuters.com/article/2014/09/24/us-taiwan-xiaomi-cybersecurity-idUSKCN0HJ08Z20140924

(Reuters) - The Taiwanese government is investigating whether Xiaomi Inc [XTC.UL], China's leading smartphone company by domestic shipments, is a cyber security threat and will make a decision within three months.

The government began performing independent tests on Xiaomi phones after reports in recent months that some models automatically send user data back to the firm's servers in mainland China, Gin-Shian Lou, a director at Taiwan's National Communications Commission, said on Wednesday.

The probe is a reminder of the scrutiny Chinese technology firms are subject to abroad as governments become increasingly wary of potential cyber security threats from the world's second-biggest economy. China's government and companies are frequently accused of cyber and industrial espionage.

The investigation also throws the spotlight on cross-strait politics. China and Taiwan have been historical foes since defeated Nationalists fled to the island after losing a civil war to China's Communists in 1949. The government in Beijing still regards Taiwan as a renegade province.

Privately owned Xiaomi has faced several allegations of security leaks in recent months. In August, the company publicly apologized and said it would change a default cloud feature after a Finnish security company found proof that Xiaomi collected address book data without permission.

"We wanted to ensure the situation was as they said, so we decided to perform our own tests," Lou told reporters in Taipei, referring to Xiaomi's assurances.

The test results should be made public soon, Lou said. It wasn't immediately clear whether the investigation could lead to any ban for Xiaomi's low-priced smartphones in Taiwan.

Xiaomi declined to comment.

The Chinese smartphone maker has also been accused in the Hong Kong media of sending copies of user text-messages back to servers on the mainland, a claim that the company has vigorously called false and libelous.

Under the law in mainland China, firms storing data on China's soil are to comply with any data requests from the government. Data stored by Taiwanese users on the mainland could be vulnerable to such requests. Some companies, notably Google Inc (GOOGL.O), have opted not to situate servers in China.

Yahoo Inc (YHOO.O) came under criticism in 2005 after it handed to Chinese authorities emails that led to the imprisonment of Shi Tao, a journalist who obtained and leaked an internal censorship order the government had sent Chinese media.

Apple Inc (AAPL.O) said last month that it had begun to store users' personal data on servers on the mainland, marking the first time the tech giant has stored user data on Chinese soil.

VIEWED WITH SUSPICION

Tensions between China and Taiwan have eased in recent years under Taipei's China-friendly president Ma Ying-jeou. The two sides have signed agreements on everything from finance to tourism.

But Taiwan still often views Chinese firms with suspicion while the government in Beijing has not ruled out the use of force should the self-ruled island formally declare independence.

Since August, Taiwan's police force has encouraged employees not to use WeChat, the mobile messaging app developed by Chinese internet giant Tencent Holdings Ltd (0700.HK).

Concerns are mounting that Taiwan is over-reliant on the mainland. Critics of Beijing argue expanding economic ties allow China to influence the island's fiercely democratic politics.

Taiwan's government also said in a statement on Tuesday that popular Japanese instant messaging service Line, owned by South Korea's Naver Corp (035420.KS), will be banned from use on government work-related computers, also due to security concerns.

A Line spokeswoman based in Tokyo told Reuters that the company is investigating the matter but would not provide more details.

Although the vast majority of Xiaomi's sales come from China, the company has set up shop elsewhere in Asia, including Singapore, Malaysia, Indonesia, the Philippines and India. It is also eyeing expansion into countries like Thailand, Brazil and Mexico.

Hong Kong's public broadcaster quoted the head of the mainland's Taiwan Affairs Office as expressing dismay over Taiwan's decision, saying "one cannot stop the attractiveness of Xiaomi phones among compatriots across the strait".

(Additional reporting by Paul Carsten and Gerry Shih in BEIJING, Teppei Kasai in TOKYO and Yimou Lee in HONG KONG; Editing by Ryan Woo)
 
  • Like
Reactions: VirusAttak

oneeye

Level 4
Verified
Jul 14, 2014
174
What about the app: (clean master) ?
does anyone know I'd this is a Chinese product. It does ask for a lot of permissions. Seems I read something bad about it,but can't remember.
 
  • Like
Reactions: TomC

oneeye

Level 4
Verified
Jul 14, 2014
174
Hi jamescv7,

I found the articles thatt put me off of cleanmaster. I posted the following in another spying thread about Xiaomi phones SPYING from the head of the India airforce and confirmed by Security outfits.

I had posted another question in a differnt thread about "cleanmaster" and went back to dig up my original research.

Back around the end of July or beginning of August this year (2014) Cleanmaster was PULLED FROM PLAYSTORE for a short bit because they were stealing all kinds of personal information. The article was on Readit and Android Central. The author gives their changelog for that update. I think it was Google that pulled it,but they made corrections ratherquickly. The best thing to do,is always research the app you want to download. Read true reviews,go online and searchfor more reviews. Visit their website, andALWAYS READ PERMISSIONS,

I think that withh the way world problems are shaping up these days,people need to be more careful in what apps we download,especially from countries that may not be so friendly now a days. Its not the developers I worry so much about,but their government subverting their work!.

As evidenced,look and listen to Britain and US spy agencies cry and complain about Apple and Google instituting stronger encryption on their devices. Do you suppose other less FREE countries will not try to exploit technology??? They already are!
 
Status
Not open for further replies.

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top