₦airaland Forum

In November 2016, security firm Kryptowire detected pre-loaded remote surveillance software on BLU phones sold online through Amazon and Best Buy. In August 2017, Engadget reported that Amazon pulled BLU Products from its website over security vulnerabilities that resulted in BLU consumer user data being covertly sent to China. One month later, Amazon reinstated sales of BLU devices on their website. CNET reported, "[Shanghai Adups Technology] Having access to the command and control channel -- a communications route between your device and a server -- allowed Adups to execute commands as if it's the user, meaning it could also install apps, take screenshots, record the screen, make calls and wipe devices without needing permission." Even after Adups publicly reported the spyware to be a mistake, kryptowire discovered that the same vulnerability was still being utilized, except in a more covert manner. The Federal Trade Commission (FTC) subsequently investigated the widely reported consumer privacy exploitation that was attributed to BLU. In April 2018, the FTC disclosed that their agency had reached a settlement with BLU where it alleged that "BLU misled consumers and put their personal data at risk." A few months later, the FTC officially concluded that BLU "deceived consumers about the disclosure of their personal information" and believed BLU "violated the Federal Trade Commission Act." In September 2018, BLU was ordered to be legally bound to specific stipulations to settle their legal misconduct. The settlement with the FTC required BLU's security practices to be thoroughly and regularly analyzed for the following 20 years by an independent 3rd party security monitoring entity. It also required BLU to develop and maintain a "comprehensive security program" designed for both "new and existing" BLU devices.