The Star N9500, a low-cost Android-powered 8-megapixel smartphone, similar to the Samsung Galaxy S4, has been reported to have Trojan-horse malware called Usupay.D installed in the phones Google Play App Store.
The Wall Street Journal reported that G Data, a German cyber security company discovered malicious software embedded in the Star N9500 device that could be used to track the user and manipulate the phone's camera remotely. Data could be transferred to a server located in China. G Data said its analysis marks the first time Usupay.D has been discovered bundled with a mobile phone.
The malicious software is pre-installed in the phone's firmware, the software that comes embedded with the phone and operates the phones systems. Phone firmware can't simply be deleted like a regular app installed from a third-party app store.
Both the Wall Street Journal and G Data's attempted to contact the manufacturer, Shenzhen-based Tianxing, which makes the phone, but wasn't successful.
While the N9500 phone was reported as being on Amazon.com for about $141, Various models of the phone were found on eBay from sellers in China.
The Star N9500 sold on Amazon was reported to have malware, the Usupay.D virus installed in the phones firmware that could track the users locations and manipulate the phones camera remotely.
The information was being sent to a server in China.
![]() |