
The app is a variant of Adups, an app from a China-based company by the same name. While it provides a mechanism for downloading and installing phone updates, it also loads a barrage of unwanted apps without permission. Advertisementįurther Reading Chinese company installed secret backdoor on hundreds of thousands of phonesThe second unpleasant surprise delivered by the UMX U686CL is something called Wireless Update. "Uninstall the Settings app, and you just made yourself a pricey paper weight," Collier wrote. That makes it virtually impossible to uninstall, since the phone can't operate properly without it. The malware that installs these programs is hidden in the phone's settings app. Malwarebytes researcher Nathan Collier said company users have reported that the hidden library installs a variant of HiddenAds, but the researchers were unable to reproduce that installation, possibly because the library waits some amount of time before doing so.

Once the library is loaded into memory, it installs software Malwarebytes calls Android/Trojan.HiddenAds. And for another, it contains an encoded string that, when decoded, contains a hidden library named .Liblmp. For one, it uses identical text strings and almost identical code. Android/ contains striking similarities to two other trojan droppers. The first is heavily obfuscated malware that can install adware and other unwanted apps without the knowledge or permission of the user. Representatives of Sprint, the owner of Virgin Mobile, meanwhile said it didn't believe the apps were malicious. Researchers at Malwarebytes said on Thursday that the device comes with some nasty surprises. The UMX U686CL runs Android and is available for $35 to qualifying users. The program is often referred to as the Obama Phone because it expanded in 2008, when President Barack Obama took office. Assurance Wireless is an offshoot of the Lifeline Assistance program, a Federal Communications Commissions plan that makes free or government-subsidized phones service available to millions of low-income families. The UMX U686CL is provided by Virgin Mobile's Assurance Wireless program. An Android phone subsidized by the US government for low-income users comes preinstalled with malware that can't be removed without making the device cease to work, researchers reported on Thursday.
