Firma Bitdefender zidentyfikowa\u0142a dzia\u0142alno\u015b\u0107 polegaj\u0105c\u0105 na integracji z\u0142o\u015bliwego oprogramowania w oprogramowaniu uk\u0142adowym smartfon\u00f3w z systemem Android na platformach MediaTek, produkowanych w Chinach pod r\u00f3\u017cnymi markami. Aktywno\u015b\u0107 z\u0142o\u015bliwa koncentruje si\u0119 na podmianie reklam i fa\u0142szywym zwi\u0119kszaniu klikni\u0119\u0107 w reklamy, a tak\u017ce na utrzymywaniu botnetu z urz\u0105dze\u0144, tworz\u0105cego rozproszon\u0105 sie\u0107 do organizowania atak\u00f3w DDoS i proxy do ruchu.<\/p>\n
Wbudowane z\u0142o\u015bliwe oprogramowanie g\u0142\u00f3wnie rozprzestrzenia si\u0119 za po\u015brednictwem bud\u017cetowych urz\u0105dze\u0144, takich jak Doogee S200 X i Cubot KINGKONG X, ale r\u00f3wnie\u017c wyst\u0119puje w fa\u0142szywych kopiach Samsung Galaxy (S25 Ultra, S24 Ultra i Note 18 Ultra) oraz urz\u0105dzeniach stylizowanych na iPhone'a. Problematyczne urz\u0105dzenia zidentyfikowano w ponad 150 krajach, jednak najwi\u0119ksza ich liczba stwierdzono w Meksyku, Francji, W\u0142oszech, Stanach Zjednoczonych, Niemczech, Brazylii i Hiszpanii. <\/p>\n
Z\u0142o\u015bliwe komponenty s\u0105 dostarczane pod postaci\u0105 aplikacji systemowych, takich jak com.android.system.lite, com.android.sys.gmsprot, com.android.sys.bcprot i com.android.sys.prot, podpisanych cyfrowym podpisem platformy i uruchamianych z prawami android.uid.system, kt\u00f3re pozwalaj\u0105 na instalacj\u0119 aplikacji oraz zarz\u0105dzanie uprawnieniami. Zintegrowany w oprogramowaniu kod \u0142aduje dodatkowe aplikacje, w kt\u00f3rych realizowana jest aktywno\u015b\u0107 z\u0142o\u015bliwa, i deleguje dodatkowe uprawnienia, takie jak dost\u0119p do powiadomie\u0144 i SMS. Wykryto 32 takie instalowane aplikacje, \u0142\u0105cz\u0105ce funkcje z\u0142o\u015bliwe z edytorem d\u017awi\u0119ku, wid\u017cetem pogody, mened\u017cerem plik\u00f3w, blokad\u0105 aplikacji i OCR. <\/p>\n
Podstawowa funkcjonalno\u015b\u0107 z\u0142o\u015bliwa jest zintegrowana w bibliotece libeasy.so, kt\u00f3ra zapewnia funkcje do \u0142adowania dodatkowych z\u0142o\u015bliwych modu\u0142\u00f3w z zewn\u0119trznych serwer\u00f3w. Serwis do interakcji z kontrolerami serwerami<\/a> jest zamaskowany jako API do sprawdzania prognozy pogody. Poniewa\u017c komponenty z\u0142o\u015bliwe s\u0105 cz\u0119\u015bci\u0105 sekcji systemowej, ich usuni\u0119cie wymaga ponownego instalowania oprogramowania urz\u0105dzenia lub dezaktywacji komponent\u00f3w za pomoc\u0105 narz\u0119dzia ADB. \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Bitdefender \u0432\u044b\u044f\u0432\u0438\u043b\u0430 \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u043f\u043e \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 Android-\u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u043e\u0432 \u043d\u0430 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430\u0445 MediaTek, \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0435\u043c\u044b\u0445 \u0432 \u041a\u0438\u0442\u0430\u0435 \u043f\u043e\u0434 \u0440\u0430\u0437\u043d\u044b\u043c\u0438 \u0431\u0440\u0435\u043d\u0434\u0430\u043c\u0438. \u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0441\u043e\u0441\u0440\u0435\u0434\u043e\u0442\u043e\u0447\u0435\u043d\u0430 \u043d\u0430 \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0435 \u0440\u0435\u043a\u043b\u0430\u043c\u044b \u0438 \u043d\u0430\u043a\u0440\u0443\u0442\u043a\u0435 \u043a\u043b\u0438\u043a\u043e\u0432 \u043d\u0430 \u0440\u0435\u043a\u043b\u0430\u043c\u0443, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043d\u0430 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0430\u043d\u0438\u0438 \u0431\u043e\u0442\u043d\u0435\u0442\u0430 \u0438\u0437 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u0444\u043e\u0440\u043c\u0438\u0440\u0443\u044e\u0449\u0435\u0433\u043e \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u0443\u044e \u0441\u0435\u0442\u044c \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 DDoS-\u0430\u0442\u0430\u043a \u0438 \u043f\u0440\u043e\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0442\u0440\u0430\u0444\u0438\u043a\u0430. \u041f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u0435 \u0438\u0437 \u043a\u043e\u0440\u043e\u0431\u043a\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043e \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":10,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-183721","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Z\u0142o\u015bliwe oprogramowanie w oprogramowaniu uk\u0142adowym chi\u0144skich smartfon\u00f3w z systemem Android na chipach MediaTek | ProHoster","description":"Firma Bitdefender zidentyfikowa\u0142a dzia\u0142alno\u015b\u0107 polegaj\u0105c\u0105 na integracji z\u0142o\u015bliwego oprogramowania w oprogramowaniu uk\u0142adowym smartfon\u00f3w z systemem Android na platformach MediaTek, produkowanych w Chinach pod r\u00f3\u017cnymi markami.","canonical_url":"https:\/\/prohoster.info\/pl\/blog\/news\/malware-in-the-firmware-of-chinese-android-smartphones-powered-by-mediatek-chips","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"pl_PL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0430\u0445 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u0445 Android-\u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u043e\u0432 \u043d\u0430 \u0447\u0438\u043f\u0430\u0445 MediaTek | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Bitdefender \u0432\u044b\u044f\u0432\u0438\u043b\u0430 \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u043f\u043e \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 Android-\u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u043e\u0432 \u043d\u0430 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430\u0445 MediaTek, \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0435\u043c\u044b\u0445 \u0432 \u041a\u0438\u0442\u0430\u0435 \u043f\u043e\u0434 \u0440\u0430\u0437\u043d\u044b\u043c\u0438 \u0431\u0440\u0435\u043d\u0434\u0430\u043c\u0438.","og:url":"https:\/\/prohoster.info\/pl\/blog\/news\/malware-in-the-firmware-of-chinese-android-smartphones-powered-by-mediatek-chips","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-10-09T20:53:43+00:00","article:modified_time":"2026-10-09T20:53:49+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts\/183721","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/comments?post=183721"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts\/183721\/revisions"}],"predecessor-version":[{"id":183722,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts\/183721\/revisions\/183722"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/media?parent=183721"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/categories?post=183721"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/tags?post=183721"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n
\u0179r\u00f3d\u0142o: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"