this post was submitted on 18 Jun 2026

101 points (100.0% liked)

Mildly Infuriating

46364 readers

654 users here now

Home to all things "Mildly Infuriating" Not infuriating, not enraging. Mildly Infuriating. All posts should reflect that. Please post actually infuriating posts to !actually_infuriating@lemmy.world

I want my day mildly ruined, not completely ruined. Please remember to refrain from reposting old content. If you post a post from reddit it is good practice to include a link and credit the OP. I'm not about stealing content!

It's just good to get something in this website for casual viewing whilst refreshing original content is added overtime.

Rules:

1. Be Respectful

Refrain from using harmful language pertaining to a protected characteristic: e.g. race, gender, sexuality, disability or religion.

Refrain from being argumentative when responding or commenting to posts/replies. Personal attacks are not welcome here.

...

2. No Illegal Content

Content that violates the law. Any post/comment found to be in breach of common law will be removed and given to the authorities if required.

That means: -No promoting violence/threats against any individuals

-No CSA content or Revenge Porn

-No sharing private/personal information (Doxxing)

...

3. No Spam

Posting the same post, no matter the intent is against the rules.

-If you have posted content, please refrain from re-posting said content within this community.

-Do not spam posts with intent to harass, annoy, bully, advertise, scam or harm this community.

-No posting Scams/Advertisements/Phishing Links/IP Grabbers

-No Bots, Bots will be banned from the community.

...

4. No Porn/Explicit

Content

-Do not post explicit content. Lemmy.World is not the instance for NSFW content.

-Do not post Gore or Shock Content.

...

5. No Enciting Harassment,

Brigading, Doxxing or Witch Hunts

-Do not Brigade other Communities

-No calls to action against other communities/users within Lemmy or outside of Lemmy.

-No Witch Hunts against users/communities.

-No content that harasses members within or outside of the community.

...

6. NSFW should be behind NSFW tags.

-Content that is NSFW should be behind NSFW tags.

-Content that might be distressing should be kept behind NSFW tags.

...

7. Content should match the theme of this community.

-Content should be Mildly infuriating. If your post better fits !Actually_Infuriating put it there.

-The Community !actuallyinfuriating has been born so that's where you should post the big stuff.

...

8. Reposting of Reddit content is permitted, but attribution is not required in any way. No links to Reddit in post body

-If you would like to provide a source link, do so in the comments but not in the post body.

...

Also check out:

Partnered Communities:

1.Lemmy Review

2.Lemmy Be Wholesome

3.Lemmy Shitpost

4.No Stupid Questions

5.You Should Know

6.Credible Defense

Reach out to LillianVS for inclusion on the sidebar.

All communities included on the sidebar are to be made in compliance with the instance rules.

founded 3 years ago

MODERATORS

LillianVS@lemmy.world

Tenthrow@lemmy.world

Lasherz12@lemmy.world

101

I found pre-installed (unremovable) malware on my phone, and ESET doesn't seem to be checking system apps... (Ulefone Armor 24) (sh.itjust.works)

submitted 6 hours ago by testaccount789@sh.itjust.works to c/mildlyinfuriating@lemmy.world

20 comments fedilink hide all child comments

TL;DR: If it's also integrated into firmware, it has full-device access. If it's just this specific app, per Kaspersky, it still has "elevated privileges" and can install crap. It cannot be disabled without breaking the UI.

Doing a scan without copying the apk:

As you can see from main screenshot, the APK would have been accessible for scanning.
I copied it to Download directory as that one gets real-time monitoring, but it will pick it up elsewhere after a scan as well.

Anyway:
VirusTotal report

Found 4 months ago by Kaspersky

And I found my device in list on blog post from Sophos. Unfortunately, they only provide a partial list, as they mention this affects "nearly 50 models".

From listed domains, with help of strings I found launcher(dot)szprize(dot)cn, although it doesn't seem to resolve to anything at the moment.

Also something interesting from Kaspersky:

When integrated into the firmware, the malware behaves differently depending on several factors. It will not activate if the language set on the device is one of Chinese dialects, and the time is set to one of Chinese time zones. It will also not launch if the device doesn’t have Google Play Store and Google Play Services installed.

Now what?

I've been using it for nearly 2 years, so there's that...

I am thinking of contacting the retailer I bought this device from, as it's still in sale. But I am not sure if they will care about it. Also, the only way I seem to be able to contact them is via tech support, so there's the chance of just getting a copy-pasted answer.

As for my particular unit, I'll probably try to update the software to newest version to see if it's still (visibly) present.
Unfortunately, updates on these devices are unstable as fuck, so I'll have to deal with that. I also hope it won't make me loose access to MediaTek EngineerMode band selection as that's something I quite want to keep using.
Or perhaps try to return it under warranty.

Since QuickStep also controls navigation (both gestures and 3-button) it can't even be disabled even if I used alternative launcher.

all 21 comments

sorted by: hot top controversial new old

[–] carrylex@lemmy.world 2 points 1 hour ago (1 children)

Buying cheap stuff from some obscure company at the other end of the planet sounds like it will make situations like this inevitable...

[–] testaccount789@sh.itjust.works 3 points 1 hour ago

Eeeeh, some of these are far from cheap. For example, the Armor 34 Pro that I was interested in is EUR 750.
Unique hardware, that's why. Otherwise I'd have gotten Moto G54 5G. Actually, I tested both, I just liked the Armor 24 more hardware-wise.

Lots of modern electronics feels too boring as it's all the same. Phones, laptops, TVs, they especially feel like copied homework.

[–] Zachariah@lemmy.world 21 points 4 hours ago

~~mildly~~ infuriating

[–] Mwa@thelemmy.club 5 points 3 hours ago (1 children)

ReInstall the ROM + KERNEL?

[–] testaccount789@sh.itjust.works 2 points 2 hours ago (1 children)

This is inside the official ROM (from factory), and there's no custom ROMs.
Not their first time: https://www.bleepingcomputer.com/news/security/cheap-android-phones-and-poor-quality-control-leads-to-malware-surprise/

[–] Mwa@thelemmy.club 2 points 1 hour ago (2 children)

then i think you have no option

[–] testaccount789@sh.itjust.works 2 points 1 hour ago

I can try to update to the latest updates and see if it's still there. Problem with these devices is the updates tend to break more things than fix. This phone got Android 15 update like half a year back and there was bunch of people reporting that the power button doesn't work to lock the phone anymore...
If yes, or should I say, me being able to detect it, I'll try to do a warranty claim.

I hate these locked down devices. I want to be able to run whatever I want like on desktops. It's a computer, dammit.

[–] lemongarlic@lemmy.world 1 points 1 hour ago (1 children)

This is really a vote with your wallet situation. Don't buy android devices without the option to root and/or bootloader unlock.

[–] testaccount789@sh.itjust.works 1 points 1 hour ago (1 children)

option to root and/or bootloader unlock

This one wouldn't be a problem. Ulefone apparently doesn't lock it down. From unlock wall of shame: https://github.com/zenfyrdev/bootloader-unlock-wall-of-shame/blob/main/brands/ulefone/README.md

Enable OEM unlocking in settings, reboot to bootloader, fastboot flashing unlock, and that's it.
But they don't release any source code and use MediaTek, so there's no use of it. 😐

[–] lemongarlic@lemmy.world 2 points 11 minutes ago

You can still use Magisk to root the device if you can dump the firmware

[–] Waterpumpee@lemmus.org 13 points 5 hours ago (1 children)

change all your passwords you used with that device. then depends, can you afford a new phone? Go with a more known brand. If you can't, start learning mandarin 😅

[–] testaccount789@sh.itjust.works 5 points 4 hours ago (1 children)

Yeah.
It sucks as usual manufacturers don't make such crazy devices. This thing has a 22,000mAh battery and quite strong light at the back. And yes, it's a quite heavy brick (647g or 1.43lbs).

I didn't find anything better to compare the thickness to, so here it is next to a 1RU switch and a dumphone:

They have even larger phones, but this is already a second time they've had malware, so I don't know about that...

[–] socsa@piefed.social 8 points 3 hours ago* (last edited 3 hours ago) (1 children)

If it makes you feel any better, that's probably not a 22AH battery either. Stop buying phone on Temu.

[–] testaccount789@sh.itjust.works 4 points 2 hours ago

There's quite a few devices like this (from other brands as wall). On a full charge with heavy use it lasts me 5 days. The capacity also checked out with a USB tester, although I only tested it during charging from something like 5%.

I could also try a discharge test, but that's going to take around 8 hours (10W max output). If you trust whoever did this test, they got 57 hours of screen on time for video streaming: https://www.devicespecifications.com/en/editor-review/c8a7ef/9
That has to fit somewhere.

Anyway, I got it on Alza. I wouldn't trust shops like that with anything above, say, EUR 50. Especially not Temu, though I haven't used them personally. The most expensive stuff I got on Aliexpress was around that sum. Two Heltec ESP32 boards with LoRa and RTL-SDR v3 (with the antenna kit).

[–] FireWire400@lemmy.world 2 points 5 hours ago* (last edited 5 hours ago) (1 children)

Can you remove it via adb shell (if you know what package its part of)?

[–] testaccount789@sh.itjust.works 5 points 4 hours ago

I don't think so. It's also responsible for system navigation. (If I force stop it 3-button nav and gestures stop working)

[–] DudeImMacGyver@kbin.earth -4 points 5 hours ago (1 children)

Wipe it.

[–] kungen@feddit.nu 16 points 5 hours ago* (last edited 5 hours ago) (1 children)

That won't remove it if it's a factory app...?

If you're living in a country with good consumer rights, I'd return it.

And people wonder how Temu and such can sell tablets so cheap... they're making their money back in many different ways.

[–] DudeImMacGyver@kbin.earth 3 points 3 hours ago (1 children)

Guess I didn't read it properly, I didn't realize it was baked in. Might be able to flash it but the real answer is, just don't buy shit off Temu.

[–] testaccount789@sh.itjust.works 1 points 2 hours ago

Not from Temu. I see such brands commonly in Slovakian stores.
If I check Alza, a pretty large electronics store, these are the numbers per brand:

Just the options when you shop on a budget. Although Motorola (or Samsung) probably wins it there for the most part.
Anyway, I love such unique hardware, and unfortunately usual brands don't do any unique designs. I guess those died with Blackberry and LG.
For example, at least Unihertz and Ulefone even have phones with a built-in projector. Although... they are actively cooled. And... there's no way to clean out the dust, so I feel like it will just overheat to death after 2 months of collecting pocket lint.

But I also like idea/design of PinePhone and Fairphone. If there was a more powerful version of PinePhone, I'd probably rock that.
I just like when brands actually do something different rather than just sticking to most common 95% and focusing on highest profit.