<Thread> Hi @WikoMobile
! It's me...again... I would like to talk about your application called "System updates".
This application is sending your IMEI in clear text to a US server.
-
Show this thread
-
To check if you have this app: open Settings -> Apps -> Menu -> Show system apps and search "System Updates" in the app list to checkpic.twitter.com/wzl5HsOSLm
3 replies 1 retweet 6 likesShow this thread -
This app will send a HTTP request after each boot or connectivity change to http://ota.tinno.com . This request contains: - version - apkVersion - token (hardcoded to 1234567
)
- imei
- session number
- phone languagepic.twitter.com/73ShlOBZxY
1 reply 5 retweets 14 likesShow this thread -
The IP address of http://ota.tinno.com is moving a lot these last days
pic.twitter.com/a963hQnXRV
2 replies 2 retweets 11 likesShow this thread -
If you want to download the OTA packages for your phone, the URL is in the response
pic.twitter.com/I47SlGVPlD
2 replies 1 retweet 11 likesShow this thread
cc @AndroidAuth @AndroidPolice @androidcentral @androidandme @Androidheadline @AndroidPolice @xdadevelopers @AndroidSPIN @TheHackersNews @verge @CNET @VICE @WIRED @JAMESWT_MHT @malwrhunterteam @hackerfantastic @LukasStefanko @twandroid @ANDROIDPIT @FigaroTech @virqdroid
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.