How Tecno Sold Millions Of Malware Infected Phones To Africans — Upstream

Anti-fraud firm, Upstream has discovered a malware in millions of Chinese produced android phones that signs up users to subscription services without their permission or knowledge.

The malicious code was discovered by Upstream in at least 53,000 Tecno Phones sold by the Chinese firm in Ethiopia, Cameroon, Egypt, Ghana and South Africa.

The malware on Tecno phones installs a malicious code called ‘XHelper’ which finds subscription services and submits fraudulent requests on behalf of users without their knowledge. The requests which are often successful and done in the background consumes pre-paid airtime which is how most people on the Continent pay for access to basic internet services.

When confronted about the malware, Transsion, a manufacturer of Tecno phones and the top selling mobile manufacturer on the continent, said the malware which is taking advantage of the most vulnerable Africans had been installed in the supply chain without its knowledge.

According to the head of Upstream’s Secure-D platform, Geoffrey Cleaves, the malware represented one of the many challenges being faced by the proliferation of Chinese companies in the android phone industry.

“The fact that the malware arrives pre-installed on handsets that are bought in their millions by typically low-income households tells you everything you need to know about what the industry is currently up against.”

The suspicious activity discovered by Upstream was found in 200,000 more Tecno phones sold throughout the continent.

In response, Tecno said the malware was an old security issue which was fixed in March, 2018. The firm said in a statement to the BBC, that it attached great importance to the data security and product safety for its consumers.

For current W2 consumers that are potentially facing Triada issues now, they are highly recommended to download the over-the-air fix through their phone for installation or contact Tecno’s after-sales service support for assistance in any questions. Every single software installed on each device runs through a series of rigorous security checks, such as our own security scan platform.”