{"id":183721,"date":"2026-10-09T22:53:43","date_gmt":"2026-10-09T20:53:43","guid":{"rendered":"https:\/\/prohoster.info\/blog\/news\/vredonosnoe-po-v-proshivkah-kitajskih-android-smartfonov-na-chipah-mediatek"},"modified":"2026-10-09T22:53:49","modified_gmt":"2026-10-09T20:53:49","slug":"malware-in-the-firmware-of-chinese-android-smartphones-powered-by-mediatek-chips","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sv\/blog\/news\/malware-in-the-firmware-of-chinese-android-smartphones-powered-by-mediatek-chips","title":{"rendered":"Skadlig programvara i firmware av kinesiska Android-smarttelefoner med MediaTek-chips","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Bitdefender har uppt\u00e4ckt aktiviteter relaterade till integrering av skadlig programvara i firmware f\u00f6r Android-smartphones som tillverkas av MediaTek i Kina under olika varum\u00e4rken. Den skadliga aktiviteten fokuserar p\u00e5 reklamins\u00e4ttning och klickfusk, samt uppr\u00e4ttande av ett botn\u00e4t av enheter som bildar ett distribuerat n\u00e4tverk f\u00f6r DDoS-attacker och trafikproxying.<\/p>\n

Den medf\u00f6ljande skadlig programvara distribueras fr\u00e4mst via budgetenheter som Doogee S200 X och Cubot KINGKONG X, men f\u00f6rekommer \u00e4ven i fejkade kopior av Samsung Galaxy (S25 Ultra, S24 Ultra\u00bb och Note 18 Ultra) samt enheter designade f\u00f6r att likna iPhone. Problematisk utrustning har registrerats i \u00f6ver 150 l\u00e4nder, men flest fall har uppt\u00e4ckts i Mexiko, Frankrike, Italien, USA, Tyskland, Brasilien och Spanien. <\/p>\n

De skadliga komponenterna levereras i form av systemapplikationer, s\u00e5som com.android.system.lite, com.android.sys.gmsprot, com.android.sys.bcprot och com.android.sys.prot, som \u00e4r signerade med plattformens digitala signatur och k\u00f6rs med r\u00e4ttigheterna android.uid.system som m\u00f6jligg\u00f6r installation av applikationer och hantering av beh\u00f6righeter. Koden integrerad i firmware laddar ner ytterligare applikationer d\u00e4r den skadliga aktiviteten genomf\u00f6rs och delegerar ytterligare r\u00e4ttigheter, s\u00e5som tillg\u00e5ng till aviseringar och SMS. 32 s\u00e5dana installera appar har registrerats, vilket kombinerar skadliga funktioner med en ljudredigerare, v\u00e4derwidget, filhanterare, applikationsblockerare och OCR. <\/p>\n

Den prim\u00e4ra skadliga funktionen \u00e4r integrerad i biblioteket libeasy.so, som tillhandah\u00e5ller funktioner f\u00f6r att ladda ytterligare skadliga moduler fr\u00e5n externa servrar. Tj\u00e4nsten f\u00f6r interaktion med kontrollcentret servrar<\/a> maskeras som ett API f\u00f6r att kontrollera v\u00e4derprognoser. Eftersom de skadliga komponenterna \u00e4r en del av systempartitionen kr\u00e4vs det att enheten flashas om eller att komponenterna inaktiveras genom ADB-verktyget f\u00f6r att avl\u00e4gsna dem.
\n
K\u00e4lla: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Bitdefender \u0432\u044b\u044f\u0432\u0438\u043b\u0430 \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u043f\u043e \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 Android-\u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u043e\u0432 \u043d\u0430 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430\u0445 MediaTek, \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0435\u043c\u044b\u0445 \u0432 \u041a\u0438\u0442\u0430\u0435 \u043f\u043e\u0434 \u0440\u0430\u0437\u043d\u044b\u043c\u0438 \u0431\u0440\u0435\u043d\u0434\u0430\u043c\u0438. \u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0441\u043e\u0441\u0440\u0435\u0434\u043e\u0442\u043e\u0447\u0435\u043d\u0430 \u043d\u0430 \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0435 \u0440\u0435\u043a\u043b\u0430\u043c\u044b \u0438 \u043d\u0430\u043a\u0440\u0443\u0442\u043a\u0435 \u043a\u043b\u0438\u043a\u043e\u0432 \u043d\u0430 \u0440\u0435\u043a\u043b\u0430\u043c\u0443, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043d\u0430 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0430\u043d\u0438\u0438 \u0431\u043e\u0442\u043d\u0435\u0442\u0430 \u0438\u0437 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u0444\u043e\u0440\u043c\u0438\u0440\u0443\u044e\u0449\u0435\u0433\u043e \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u0443\u044e \u0441\u0435\u0442\u044c \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 DDoS-\u0430\u0442\u0430\u043a \u0438 \u043f\u0440\u043e\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0442\u0440\u0430\u0444\u0438\u043a\u0430. \u041f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u0435 \u0438\u0437 \u043a\u043e\u0440\u043e\u0431\u043a\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043e \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":10,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-183721","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Skadlig programvara i firmware f\u00f6r kinesiska Android-smartphones p\u00e5 MediaTek-chips | ProHoster","description":"Bitdefender har uppt\u00e4ckt aktiviteter relaterade till integrering av skadlig programvara i firmware f\u00f6r Android-smartphones som tillverkas av MediaTek i Kina under olika varum\u00e4rken.","canonical_url":"https:\/\/prohoster.info\/sv\/blog\/news\/malware-in-the-firmware-of-chinese-android-smartphones-powered-by-mediatek-chips","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sv_SE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0430\u0445 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u0445 Android-\u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u043e\u0432 \u043d\u0430 \u0447\u0438\u043f\u0430\u0445 MediaTek | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Bitdefender \u0432\u044b\u044f\u0432\u0438\u043b\u0430 \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u043f\u043e \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 Android-\u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u043e\u0432 \u043d\u0430 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430\u0445 MediaTek, \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0435\u043c\u044b\u0445 \u0432 \u041a\u0438\u0442\u0430\u0435 \u043f\u043e\u0434 \u0440\u0430\u0437\u043d\u044b\u043c\u0438 \u0431\u0440\u0435\u043d\u0434\u0430\u043c\u0438.","og:url":"https:\/\/prohoster.info\/sv\/blog\/news\/malware-in-the-firmware-of-chinese-android-smartphones-powered-by-mediatek-chips","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-10-09T20:53:43+00:00","article:modified_time":"2026-10-09T20:53:49+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/183721","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/comments?post=183721"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/183721\/revisions"}],"predecessor-version":[{"id":183722,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/183721\/revisions\/183722"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/media?parent=183721"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/categories?post=183721"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/tags?post=183721"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}