<Thread> Hi @WikoMobile
! Let's talk about the ApeSaleTracker and ApeStsMonths apps found in your phones.
These apps are pre-installed system apps which send regularly and silently the user infos to a Chinese 3rd party called Tinno by HTTP or SMS without user consent
-
-
When the alarm is triggered, it will send the
@WikoMobile user IMEI, client number, GSM cell location, serial number, build version in clear text to http://eservice.tinno.com ...Every month!pic.twitter.com/lZDCzI7Ntj
Show this thread -
Moreover, when you boot your
@WikoMobile device, the SaleTrackerBootReceiver of ApeSaleTracker (aka STS) start under certain conditions the SaleTrackerService.pic.twitter.com/ASOo0V8QaL
Show this thread -
As the StsMonthsService, the SaleTrackerService register receivers to STS_REFRESH, ACTION_SMS_SEND, ACTION_SMS_DELIVERED, AIRPLANE_MODE and CONNECTIVITY_CHANGE.pic.twitter.com/J7b9UkIkNH
Show this thread -
Depending the network availability this app will send
@WikoMobile user IMEI, client number, product number, serial number, build version by HTTP or SMS.pic.twitter.com/owxHW41sIe
Show this thread -
Yes, you heard me, it will send you device info by SMS to a number located in Shenzhenpic.twitter.com/i2SddaM5Hv
Show this thread -
This app contain a basic warning activity which doesn't seems to be used. Even, if it is used, when you press the OK button nothing happen. So, there is no way to disable this data collection...pic.twitter.com/LlEwNn8TAz
Show this thread -
You will not see this screen, when you press the back button or the app switch button, they add a filter in the Android framework (in PhoneWindowManager) to not show you this app.pic.twitter.com/y2J7lCDMf0
Show this thread -
If you want to play with it and change the request parameters you can access the SaleTrackerActivity by typing *#*#2374#*#* in the dialerpic.twitter.com/EdIMwZAMuE
Show this thread -
Let's summarise: 1.
@WikoMobile and Tinno is collecting your device info without user consent 2. As an end user you have no way to disable it. 3. They send SMS to China with your data without user consent 4. They send your data in clear textShow this thread -
- End of conversation
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.