News for hackers. Stuff that matters.
Re:New 'unremovable' xHelper malware has infected 45,000 And... by morbm on Tuesday October 29, 2019 @03:11PM (#21390936)
I'd wager that the firmware came pre-infected by the manufacturer (or an update to the firmware has the infection).

Based on the reddit thread at least one of the devices is from a no-name manufacturer.

https://www.reddit.com/r/antivirus/comments/bj6isa/xhelper_k...

Re:New 'unremovable' xHelper malware has infected 45,000 And... by walrus01 on Tuesday October 29, 2019 @04:54PM (#21391902)
a not insignificant portion of generic weird mediatek chipset android phones come rooted from the manufacturer, because the OS is built with a root/developer configuration. This also helps malware like this spread on the sub-$80 android phones sold to non technically sophisticated users in the developing world.
Re:New 'unremovable' xHelper malware has infected 45,000 And... by cptskippy on Tuesday October 29, 2019 @05:17PM (#21392135)
I remember reading something about mediatek based phones saving on the BOM by utilizing virtualization on a single SoC to run the baseband RTOS and the Smartphone OS.
Re:New 'unremovable' xHelper malware has infected 45,000 And... by arcticbull on Tuesday October 29, 2019 @05:28PM (#21392246)
That’s actually kind of brilliant.
Re:New 'unremovable' xHelper malware has infected 45,000 And... by londons_explore on Tuesday October 29, 2019 @06:27PM (#21392774)
Until you get bugs like "3D games lag when in fast moving car due to constant cell handovers" and "4G doesn't work at the same time as playing a 1080p60 video, so netflix/youtube are broken unless on wifi".
Re:New 'unremovable' xHelper malware has infected 45,000 And... by arcticbull on Tuesday October 29, 2019 @06:40PM (#21392872)
Sure but the phones $80. Getting to that price point requires some compromises. You’d think they’d also set the baseband VM at highest QOS.
Re:New 'unremovable' xHelper malware has infected 45,000 And... by himlion on Tuesday October 29, 2019 @06:56PM (#21392977)
I'm currently using a Xiaomi Redmi Go that was a bit less than that and I think it's remarkable how few compromises it has.
Re:New 'unremovable' xHelper malware has infected 45,000 And... by scarface74 on Tuesday October 29, 2019 @09:57PM (#21393966)
That’s a fair compromise to make a smart phone more affordable.
Re:New 'unremovable' xHelper malware has infected 45,000 And... by pmlnr on Tuesday October 29, 2019 @05:29PM (#21392264)
This happened to me with the Triada virus, on a Nomu S10 - it came with factory ota. That one patched the Zygote process and became invisible and unremovable without reflashing.