{"id":183721,"date":"2026-10-09T22:53:43","date_gmt":"2026-10-09T20:53:43","guid":{"rendered":"https:\/\/prohoster.info\/blog\/news\/vredonosnoe-po-v-proshivkah-kitajskih-android-smartfonov-na-chipah-mediatek"},"modified":"2026-10-09T22:53:49","modified_gmt":"2026-10-09T20:53:49","slug":"malware-in-the-firmware-of-chinese-android-smartphones-powered-by-mediatek-chips","status":"publish","type":"post","link":"https:\/\/prohoster.info\/da\/blog\/news\/malware-in-the-firmware-of-chinese-android-smartphones-powered-by-mediatek-chips","title":{"rendered":"Malware i firmware til kinesiske Android-smartphones med MediaTek-chips","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Bitdefender har identificeret aktiviteter relateret til integration af skadelig software i firmware til Android-smartphones p\u00e5 MediaTek-platforme, der produceres i Kina under forskellige m\u00e6rker. Den skadelige aktivitet er fokuseret p\u00e5 reklameindskud og kliksvindel, samt opretholdelse af et botnet af enheder, der danner et distribueret netv\u00e6rk til organisering af DDoS-angreb og proxiering af trafik.<\/p>\n

Det medf\u00f8lgende malware distribueres prim\u00e6rt gennem budgetenheder som Doogee S200 X og Cubot KINGKONG X, men findes ogs\u00e5 i falske kopier af Samsung Galaxy (S25 Ultra, S24 Ultra og Note 18 Ultra) samt enheder, der ligner iPhone. Problematisk enheder er registreret i mere end 150 lande, men det st\u00f8rste antal er blevet opdaget i Mexico, Frankrig, Italien, USA, Tyskland, Brasilien og Spanien. <\/p>\n

De skadelige komponenter leveres som systemapplikationer, s\u00e5som com.android.system.lite, com.android.sys.gmsprot, com.android.sys.bcprot og com.android.sys.prot, underskrevet med en digital signatur fra platformen og udf\u00f8res med rettighederne android.uid.system, som tillader installation af applikationer og styring af bef\u00f8jelser. Koden integreret i firmwaren downloader ekstra applikationer, hvor den skadelige aktivitet reelt implementeres, og delegerer yderligere bef\u00f8jelser, s\u00e5som adgang til meddelelser og SMS. Der er registreret 32 s\u00e5danne sekund\u00e6rt installerede applikationer, der kombinerer skadelige funktioner med en lydredigerer, et vejr-widget, en filh\u00e5ndtering, en app-blokker og OCR. <\/p>\n

Den prim\u00e6re skadelige funktionalitet er integreret i biblioteket libeasy.so, der tilbyder funktioner til downloading af ekstra skadelige moduler fra eksterne servere. Tjenesten til interaktion med styrende servere<\/a> er camoufleret som et API til at tjekke vejrudsigten. Da de skadelige komponenter er en del af det systemm\u00e6ssige omr\u00e5de, kr\u00e6ves det at geninstallere enheden eller deaktivere komponenterne via ADB-v\u00e6rkt\u00f8jet for at fjerne dem.
\n
Kilde: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Bitdefender \u0432\u044b\u044f\u0432\u0438\u043b\u0430 \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u043f\u043e \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 Android-\u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u043e\u0432 \u043d\u0430 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430\u0445 MediaTek, \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0435\u043c\u044b\u0445 \u0432 \u041a\u0438\u0442\u0430\u0435 \u043f\u043e\u0434 \u0440\u0430\u0437\u043d\u044b\u043c\u0438 \u0431\u0440\u0435\u043d\u0434\u0430\u043c\u0438. \u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0441\u043e\u0441\u0440\u0435\u0434\u043e\u0442\u043e\u0447\u0435\u043d\u0430 \u043d\u0430 \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0435 \u0440\u0435\u043a\u043b\u0430\u043c\u044b \u0438 \u043d\u0430\u043a\u0440\u0443\u0442\u043a\u0435 \u043a\u043b\u0438\u043a\u043e\u0432 \u043d\u0430 \u0440\u0435\u043a\u043b\u0430\u043c\u0443, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043d\u0430 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0430\u043d\u0438\u0438 \u0431\u043e\u0442\u043d\u0435\u0442\u0430 \u0438\u0437 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u0444\u043e\u0440\u043c\u0438\u0440\u0443\u044e\u0449\u0435\u0433\u043e \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u0443\u044e \u0441\u0435\u0442\u044c \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 DDoS-\u0430\u0442\u0430\u043a \u0438 \u043f\u0440\u043e\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0442\u0440\u0430\u0444\u0438\u043a\u0430. \u041f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u0435 \u0438\u0437 \u043a\u043e\u0440\u043e\u0431\u043a\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043e \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":10,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-183721","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Skadelig software i firmwaren til kinesiske Android-smartphones p\u00e5 MediaTek-chips | ProHoster","description":"Bitdefender har identificeret aktiviteter relateret til integration af skadelig software i firmware til Android-smartphones p\u00e5 MediaTek-platforme, der produceres i Kina under forskellige m\u00e6rker.","canonical_url":"https:\/\/prohoster.info\/da\/blog\/news\/malware-in-the-firmware-of-chinese-android-smartphones-powered-by-mediatek-chips","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"da_DK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0430\u0445 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u0445 Android-\u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u043e\u0432 \u043d\u0430 \u0447\u0438\u043f\u0430\u0445 MediaTek | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Bitdefender \u0432\u044b\u044f\u0432\u0438\u043b\u0430 \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u043f\u043e \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 Android-\u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u043e\u0432 \u043d\u0430 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430\u0445 MediaTek, \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0435\u043c\u044b\u0445 \u0432 \u041a\u0438\u0442\u0430\u0435 \u043f\u043e\u0434 \u0440\u0430\u0437\u043d\u044b\u043c\u0438 \u0431\u0440\u0435\u043d\u0434\u0430\u043c\u0438.","og:url":"https:\/\/prohoster.info\/da\/blog\/news\/malware-in-the-firmware-of-chinese-android-smartphones-powered-by-mediatek-chips","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-10-09T20:53:43+00:00","article:modified_time":"2026-10-09T20:53:49+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/183721","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/comments?post=183721"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/183721\/revisions"}],"predecessor-version":[{"id":183722,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/183721\/revisions\/183722"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media?parent=183721"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/categories?post=183721"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/tags?post=183721"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}