Alcatel pre-installed malware

[guy12]

I have been using the Alcatel Pixi 4 as a replacement for a week now, and just now have I read the recent news that the phone came pre installed with malware. 

Malwarebytes detected two types of malware: "pup.riskware.autoins.fota" and "adware.tctweather"

Can anyone knowledgable about malware please tell me whether these apps could have acted as spyware (keylogger etc)? I'm pretty sure the PUP (I read it can install trojans etc) hadn't installed anything else because nothing else was detected. Also I didn't notice any actual ads popping up, only that my Chrome homepage had changed.

[mbam_mtbr]

Hi @guy12,

Luckily, these are pretty low level threats.  Thus, no spyware/keylogging.  However, the pup.riskware.autoins.fota does have the potential to install nastier pieces of malware, so best to disable sooner than later.  Here's a tutorial on how to do so:

 

You can use this command at step 7 under Uninstalling Adups via ADB command line to remove adware.tctweather:

adb shell pm uninstall -k --user 0 com.tct.weather

Nathan

[guy12]

Thank you very much! 

Surely malwarebytes would have detected any other threats if "pup.riskware.autoins.fota" had installed them onto the device right?

[mbam_mtbr]

Hi @guy12,

Yes, but if you like some piece of mind, I can personally check everything on your device.  Sometimes there are apps that are not technically malicious,  but I would personally remove anyway.  You can do this by sending an Apps Report.

To send an Apps Report with Malwarebytes for Android use the following instructions.

1.Open the Malwarebytes for Android app.

2.Tap the Menu icon.

3. Tap Your apps.

4. Tap three lines icon in upper right corner.

5. Tap Send to support

Choose an email app to send Apps Report.

Your email app will open with the Apps Report included. Send the Apps Report to create a ticket.

PM me the email used and/or the ticket number assigned.

Nathan