Jump to content
ZiipinApps

False positives for Ziipin Android applications

Recommended Posts

Hello MalwareBytes team,

I’m the product director from Ziipin Network Company, we want to report false positives for our Android keyboard applications. We are developing high-quality keyboard applications with different languages for many areas in the world. Our applications were enjoyed by millions of users, the average rate score is 4.7 of 5 in Google App Store. However, recently some users told us our keyboard apps were wrongly marked as malwares by the MalwareBytes app, which confuses the users a lot and we can’t accept that. After a check, we did find that all our Android applications reporting as Malwares with “Adware.Mobclick.Ziipin” if the package name of the app contains “com.ziipin.softkeyboard”. We’d like to communicate with MalwardBytes team to eliminate the misunderstandings or concerns. Below is the detail explanation of the “Mobclick” , please help to clean our applications form the Malware list, for any concern please let me know. Thanks very much for your understanding. 

image.png.a55a4161e33cc842a7c93dd43ffa6ba0.png

About the “Mobclick”

 

The “Mobclick” detected is actually from the codes of Umeng analysis SDK, not from our keyboard apps. It is used for event statistics such as theme downloading, emoji clicks, chosen recommended words for us. It can help to improve the application, not for any other purpose. 

Java.perform (function () {
  can MobclickAgent = Java.use ("com.umeng.analytics.MobclickAgent");
  MobclickAgent.onEvent.overload ('android.content.Context', 'java.lang.String', 'java.util.Map'). Implementation =
    function (arg1, arg2, arg3) {
      console.log ("onEvent called.");
      console.log ("Arg2 =" + arg2);
      console.log ("Arg3 =");
      const HashMap = Java.use ('java.util.HashMap');
      can arg3_cast = Java.cast (arg3, HashMap);
      console.log (arg3_cast);
      this.onEvent (arg1, arg2, arg3);
    };
});

 

About Umeng analysis SDK

Umeng is one of the most popular platforms for app operation analysis and advertising tracker. It's controlled by Alibaba which is one of the biggest Internet company in the world. We're using Umeng SDK to check the user trends and using its analysis to help us to improve our products.

https://mobile.umeng.com/

 

The data Umeng collected are mainly used to calculated the new users/active users/active periods/retention rate/etc. from different channels/versions/sources. The data collected is for user statistic metrics, the same as all other app analysis platforms, but not for single user, and we could only know the whole trends, can't get any data from certain equipment

 

For example, below are some metrics info we got from Umeng:

Daily increased users-image.png.74c20dce5e555acc04e7323a71df5e91.png

Version info-image.png.b08cb570d082aceff620e661043e6968.png

Usage of themes-image.png.3b1de87b79df4b691e9d513cbde1200d.png

Usage of emoji-image.png.b77175d750e8043cab228578313f9afe.png

 

Below are the links for Umeng SDK and related DOC for your reference.

https://developer.umeng.com/sdk

https://developer.umeng.com/docs/119267/detail/118578

Our applications

Below are the links for our main keyboard applications.

For Kazakhstan:

https://play.google.com/store/apps/details?id=com.ziipin.softkeyboard.kazakhstan 

For Arbaic:

https://play.google.com/store/apps/details?id=com.ziipin.softkeyboard.saudi 

For Turkey:

https://play.google.com/store/apps/details?id=com.ziipin.softkeyboard.turkey 

For Iran:

https://play.google.com/store/apps/details?id=com.ziipin.softkeyboard.iran 

For some other countries:

https://play.google.com/store/apps/details?id=com.ziipin.softkeyboard.qatar 

https://play.google.com/store/apps/details?id=com.ziipin.softkeyboard.uae 

https://play.google.com/store/apps/details?id=com.ziipin.softkeyboard.oman 

https://play.google.com/store/apps/details?id=com.ziipin.softkeyboard.iraq 

https://play.google.com/store/apps/details?id=com.ziipin.softkeyboard.dz 

https://play.google.com/store/apps/details?id=com.ziipin.softkeyboard.ly 

https://play.google.com/store/apps/details?id=com.ziipin.softkeyboard.sa 

https://play.google.com/store/apps/details?id=com.ziipin.softkeyboard.uzbekistan 

https://play.google.com/store/apps/details?id=com.ziipin.softkeyboard.tn 

https://play.google.com/store/apps/details?id=com.ziipin.softkeyboard.ma 

https://play.google.com/store/apps/details?id=com.ziipin.softkeyboard.ye

 

 

Ryan

Ziipin Network

 

Share this post


Link to post
Share on other sites

Hi @ZiipinApps,

Thanks for bringing this to our attention.  This issue has been resolved and will no longer be detected in future database versions.


Thanks again,
Nathan
 

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.