Bob's Byte

Secure-D Reveals Tecno W2 Comes Pre-Loaded with Malware

  • PDF

It's a manufacturer's nightmare: somewhere in the supply chain somebody has added malware to the mobile phones. Units go out to the customer with undiscovered pre-installed malware. And an ambitious security provider uncovers it and issues a global press release exposing the infection.

In this case, it's Transsion and their Tecno W2 smartphones.

Security platform Secure-D, part of Upstream (who sells software to more than 60 mobile operators in over 45 countries) processed more than 1.7 billion mobile transactions in 2019, detecting and blocking over 98,000 malicious apps in 20 countries.

Techo W2 in Kenya

Starting late last year, Secure-D caught and blocked an unusually large number of transactions coming from Transsion Tecno W2 handsets mainly in Ethiopia, Cameroon, Egypt, Ghana, and South Africa-- with some fraudulent mobile transaction activity detected in another 14 countries. To date, a total of 19.2m suspicious transactions – which would have secretly signed users up to paid subscription services without their permission – have been recorded from over 200k Tecno devices. 

Secure-D’s further investigation discovered components of the xHelper/Triada malware preinstalled on 53k Transsion’s Tecno W2 smartphones, a low-cost handset model typically bought by those on a lower income.

Triada is a well-known and extensively investigated malware that acts as a software backdoor and malware downloader. It installs a trojan known as “xHelper” onto compromised devices.

It uses top-level device privileges to execute arbitrary malicious code after receiving instructions from a remote command and control server. It then hides inside permanent system components, making it more resilient against attempts to remove it.

Geoffrey Cleaves, Head of Secure-D at Upstream, comments: “This particular threat takes advantage of those most vulnerable." Referring to the fact this hits Africa's entry-level mobile buyers. Tecno W2 sells for $30-$45.

Tecno backs Manchester City

In 2018 alone, Transsion sold 124 million mobile phones globally. According to IDC figures for 2018, Transsion then ranked 4th in global mobile phone brands and still holds the largest mobile phone market share in Africa.

Transsion, now a billion dollar company running three brands from its HQ in Shenzhen, has been focusing on global market expansion in recent years. Tecno, for example, is a sponsor since 2016 of the English Premier League champions, Manchester City.Their global sales network covers 70+ countries in emerging markets including Nigeria, Tanzania, Kenya, Ethiopia, Egypt, India, Pakistan, Indonesia, Vietnam and Bangladesh.

But instead of scoring a goal, this time it's a yellow card for the Chinese manufacturer.

Go Secure-D Investigation of Transsion Tecno W2

Microsoft Doubles Down: Two-Faces of Surface Duo

  • PDF

Starting at $1399, Microsoft’s Surface Duo opens into the thinnest mobile device on the market and connects two PixelSense™ Fusion Displays to create one expansive 8.1-inch screen.

 Microsoft Surface Duo

With Qualcomm Snapdragon 855 and dimensions of 145.2 mm (H) x 93.3 mm (W) x 9.9 mm (T at hinge), there’s room for an eSIM5 and one Nano SIM. It runs on Android 10.

But don’t call it a smartphone. Microsoft really, really wants to create a new category of mobile device-- that is, a popular new category.

“We designed Surface Duo for people who want to get more done with the device in their pocket. Our internal research shows that 3 out of 4 people report struggling to complete complex tasks while away from their computer. That’s because smartphones with a single screen aren’t designed for you to easily do multiple things at once,” says Panos Panay, Chief Product Officer for Windows + Devices.

“Think about it. You continually have to switch between apps to get even the most essential things done – breaking focus, breaking flow. Just like using two monitors at your desk, having two distinct screens lets you open up two apps side by side…”

He goes on “..as we look ahead to the next wave of mobile productivity and creativity, we see an opportunity to create something new with Surface Duo-- not to reinvent the phone, but to inspire people to rethink how they want to use the device in their pocket.”

Read more...

Scarcity: The 30 Natural Elements in Smartphones

  • PDF

Time to celebrate the International Year of the Periodic Table (also fondly known as IYPT2019).

The celebration includes a new Periodic Table showing the 90 natural elements that make up EVERYTHING-- created by the European Chemical Society (EuroChemS) to warn us about depleting these natural elements (element scarcity).

Scarcity of Elements

"Unless solutions are provided, we risk seeing many of the natural elements that make up the world around us run out – whether because of limited supplies, their location in conflict areas, or our incapacity to fully recycle them."

And "smartphones" seem to be the Number One culprit called out by our European chemists.

They are highlighted on the new table with "Call me, please" mobile phone icons on 30 of these celebrity elements. (It's only us and the kids and their parents with their darn helium balloons that get such a shout-out.)

2019 is the 150th anniversary of the periodic table, conceived in 1869 by the Russian chemist Dmitri Mendeleev. 

The world's oldest known classroom version of the periodic table (1885) was just discovered in Scotland-- found in a cluttered storeroom (probably stored there originally because it was only being used, you know, periodically. LOL).

Just to prove our chemical colleagues are not all "doom and gloom," EuroChemS also unveiled a video game, “Elemental Escapades!” 

Yes, that exclamation point is theirs, part of their game's name-- and it would seem to represent an excitable element in their organic word compound.

Which may prove-- despite the seriousness of exhausting our natural elements-- we're still allowed to laugh a little bit at ourselves.

Humor is the 91st natural element and is also growing scarcer these days.

Go EuroChemS Unveils Video Game, “Elemental Escapades! 

Security in a Flash: datAshur Pro

  • PDF

DatAshur ProIf security wasn't our foremost concern before 2016, Yahoo gave us all a billion reasons this year to be concerned.

While cybersecurity at the data centers of enterprises may be the front line of the battle for security, most small businesses instead fight a guerilla war. Insecure mobile devices, employee indiscretion, and "insider threat" are a formidable trio of security threats facing every small and medium size company.

On top of that, security gurus advise us to expect an increase of criminal attacks, as organized crime shifts to harvest from smaller, less protected data orchards.

And did we mention the upcoming GDPR standard to come into effect into 2018 for anyone with EU data?

That's why we chose to test the datAshur Pro. This PIN authenticated, hardware-encrypted USB 3.0 flash drive lets you keep important data safe. The model we tested came with 64GB (but the range starts at 8GB). You use it straight out of the box. And whether you use it or lose it-- your data is safe either way.

Read more...

Sinking Shipping Firm to Cause 2016 Price Disruption

  • PDF

Korea's Hanjin, container shipping giant, drowns in financial waves and the consumer electronics industry will get swamped.

Hanjin Shipping

With too many container ships and freight rates at historical lows, Hanjin files for receivership-- and much of the industry will only now learn how dependent the electronics industry is on container ships.

For example, Daniel Yoo at Kiwoom Securities told CNBC Hanjin handles more than 50% of Samsung Electronics' device shipments from South Korea to the Americas-- as well as 23% of LG Electronics.  

Read more...