Jump to content
Due to inclement weather in Southwest Florida, our Clearwater support team is offline. Our other offices are available to assist you, however their responses may be delayed. We appreciate your patience and understanding during this time. ×

False positives for Ziipin Android applications

Recommended Posts

Hello MalwareBytes team,

I’m the product director from Ziipin Network Company, we want to report false positives for our Android keyboard applications. We are developing high-quality keyboard applications with different languages for many areas in the world. Our applications were enjoyed by millions of users, the average rate score is 4.7 of 5 in Google App Store. However, recently some users told us our keyboard apps were wrongly marked as malwares by the MalwareBytes app, which confuses the users a lot and we can’t accept that. After a check, we did find that all our Android applications reporting as Malwares with “Adware.Mobclick.Ziipin” if the package name of the app contains “com.ziipin.softkeyboard”. We’d like to communicate with MalwardBytes team to eliminate the misunderstandings or concerns. Below is the detail explanation of the “Mobclick” , please help to clean our applications form the Malware list, for any concern please let me know. Thanks very much for your understanding. 


About the “Mobclick”


The “Mobclick” detected is actually from the codes of Umeng analysis SDK, not from our keyboard apps. It is used for event statistics such as theme downloading, emoji clicks, chosen recommended words for us. It can help to improve the application, not for any other purpose. 

Java.perform (function () {
  can MobclickAgent = Java.use ("com.umeng.analytics.MobclickAgent");
  MobclickAgent.onEvent.overload ('android.content.Context', 'java.lang.String', 'java.util.Map'). Implementation =
    function (arg1, arg2, arg3) {
      console.log ("onEvent called.");
      console.log ("Arg2 =" + arg2);
      console.log ("Arg3 =");
      const HashMap = Java.use ('java.util.HashMap');
      can arg3_cast = Java.cast (arg3, HashMap);
      console.log (arg3_cast);
      this.onEvent (arg1, arg2, arg3);


About Umeng analysis SDK

Umeng is one of the most popular platforms for app operation analysis and advertising tracker. It's controlled by Alibaba which is one of the biggest Internet company in the world. We're using Umeng SDK to check the user trends and using its analysis to help us to improve our products.



The data Umeng collected are mainly used to calculated the new users/active users/active periods/retention rate/etc. from different channels/versions/sources. The data collected is for user statistic metrics, the same as all other app analysis platforms, but not for single user, and we could only know the whole trends, can't get any data from certain equipment


For example, below are some metrics info we got from Umeng:

Daily increased users-image.png.74c20dce5e555acc04e7323a71df5e91.png

Version info-image.png.b08cb570d082aceff620e661043e6968.png

Usage of themes-image.png.3b1de87b79df4b691e9d513cbde1200d.png

Usage of emoji-image.png.b77175d750e8043cab228578313f9afe.png


Below are the links for Umeng SDK and related DOC for your reference.



Our applications

Below are the links for our main keyboard applications.

For Kazakhstan:


For Arbaic:


For Turkey:


For Iran:


For some other countries:















Ziipin Network


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.