German Federal Office for Information Security (BSI) is launching an investigation into the cybersecurity of mobile phones of certain Chinese manufacturers.
The investigation was requested by both the SPD politician Jens Zimmermann and the CDU digital politician Tankred Schipanski.
The decision of the BSI comes after the Lithuanian cyber defense published a report claiming that some mobile phones that are commercialized by Xiaomi and Huawei revealed an undocumented behavior that was possible to trigger remotely by the Chinese vendors.
“Our recommendation is to not buy new Chinese phones, and to get rid of those already purchased as fast as reasonably possible,” Lithuanian Deputy Defense Minister Margiris Abukevicius told reporters during the unveiling of the report from Lithuania’s National Cyber Security Center.
Lithuanian government experts have analyzed three specific smartphone models, the Huawei P40 5G, the Xiaomi Mi 10T 5G and the OnePlus 8T 5G. According to the report, Xiaomi phones could be instructed to censor terms such as “Long live Taiwan independence” or “Free Tibet.”
“Xiaomi’s devices do not censor communications to or from its users. Xiaomi has never and will never restrict or block any personal behaviors of our smartphone users, such as searching, calling, web browsing or the use of third-party communication software. Xiaomi fully respects and protects the legal rights of all users.” reads the reply of Xiaomi.
A BSI spokesman told Tagesschau that Chinese manufacturers are already excluded from a list of smartphone vendors that can be officially ordered as service phones by the federal authorities.
Experts fear that Chinese manufactures could have also introduced in their devices hidden features that could give them deep access to any communications through the mobile phones before they were encrypted.
Follow me on Twitter: @securityaffairs and Facebook
| [adrotate banner=”9″] | [adrotate banner=”12″] |
(SecurityAffairs – hacking, Chinese mobile phones)
[adrotate banner=”5″]
[adrotate banner=”13″]
Security Affairs Malware newsletter includes a collection of the best articles and research on malware…
A new round of the weekly Security Affairs newsletter has arrived! Every week, the best…
Fintech firm Figure confirmed a data breach after hackers used social engineering to trick an…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds a flaw in BeyondTrust RS and…
A new alleged Russia-linked APT group targeted Ukrainian defense, government, and energy groups, with CANFAIL…
A new threat actor, UAT-9921, uses the modular VoidLink framework to target technology and financial…
This website uses cookies.
