An Israeli tech firm has quietly embedded spyware into Samsung smartphones - and it poses a serious surveillance threat

Original article from May: https://smex.org/open-letter-to-samsung-end-forced-israeli-app-installations-in-the-wana-region/

all 12 comments

sorted by: hot top controversial new old
[–] 41 points 1 year ago

From another article - the app is called "Aura:

The app in question allows access to users' data, including sensitive information such as IP addresses, device fingerprints, and personal details, enabling the identification and geographical location of the phone’s owner

  • source
  • [–] 17 points 1 year ago* (last edited 1 year ago) (3 children)

    If I rooted my phone can I somehow remove them(maybe with adaway and canta)??
    But tbh I will never buy a Samsung again.

    Edit: I don't think you need root to remove it.

  • source
  • hideshow 3 child comments
  • [–] 17 points 1 year ago

    I am not a professional, but i would say you can probably remove the App, BUT with just removing the App it might still be somewhere on the phone on a deeper level that you cannot really see right away and is hard to trace.

  • source
  • parent
  • [–] 17 points 1 year ago* (last edited 1 year ago) (1 child)

    The app’s privacy settings claim that users can disable this data collection by turning off “AppCloud” in the app list. But, according to SMEX, deletion requires the user to submit a form that does not exist, making it impossible to fully remove, at least without advanced technical expertise.

    Hm, I just uninstall AppCloud no problem in a non-rooted, stock android in and from the region.
    It also showed the URI or whatever of com.something.aura.

    However, can't find any Aura app.

    Looks like Aura app gets installed by AppCloud. I'm a bit frustrated I can't find a list of apps known to be installed by AppCloud, or that include this *.aura.* URI. I mean this should be relevant for a shit ton of people and could be easily crowdsourced.

  • source
  • hideshow 1 child comment
  • [–] 2 points 1 year ago

    Some more information:

    I looked at four different Samsung phones today (physically in the region). 2x phones bought in Europe. 2x phones bought in the region.

    All non-rooted, stock android.

    None of the phones had Aura installed. Two of them had AppCloud installed (one EU phone, one phone from the region) and it couldn't be disabled as easily as the other phone. (I haven't tried ADB, etc. yet, just the standard uninstallation procedure).

  • source
  • parent
  • [–] 6 points 1 year ago

    I’m grateful the canary exists and covers a lot of underreported stuff that needs a “canary” to ring the alarm bell.

    I do think they could do with sensationalising and exaggerating a little less in their titles though.

  • source
  • [–] 3 points 1 year ago

    They should call it WANACry when it gets used for extortion.

  • source
  • [–] 3 points 1 year ago

    I remember some time ago this topic was discussed in a Telegram group about privacy. Some users began accusing OP of being anti-Semitic.

  • source
  • [+] -1 points 1 year ago* (1 child)
  • 51 comments in c/technology@lemmy.zip view that post
    [–] 63 points 1 year ago (1 child)
  • [–] 25 points 1 year ago (1 child)

    Social Media Exchange (SMEX), a nonprofit digital human rights organisation focusing on the West Asia/North Africa (WANA) region, has warned people living in these regions that an effective spyware app developed by an Israeli firm is quietly embedded in Samsung smartphones across the region and poses a serious surveillance threat.

  • source
  • hideshow 1 child comment
  • [–] 17 points 1 year ago (5 children)
  • [–] 23 points 1 year ago (4 children)

    That website is an excellent resource, but they can't just expect everyone to have money for a pixel, even if privacy is a priority for me and many people, a pixel is just beyond the reach of the large majority of internet users.

    Instead they need to make a curated list of less than ideal but still better than stock alternatives, or else people will just give up and get stock android instead.

  • source
  • parent
  • hideshow 4 child comments
  • [–] 4 points 1 year ago

    I used to think like this. However, if someone says, "The most expensive phone I can afford is embedded with unremovable Israeli spyware, and there is no operating system that is open-source and receives regular security patches available for it, and I can't afford to pay for internet access, so I use the platform that only lets me access Facebook", I'm not sure that there's much I can do to help them. If someone said, "Can I use a phone that costs less because it's subsidized by Facebook while being protected from malware and surveillance?" I'd respond with, "The answer is probably 'no'". I'm sure that it's possible to be in a situation where the only choice is to have no internet access at all or to use the internet in a way that makes one vulnerable to surveillance, and I think it's likely that getting more money is the most reliable cure for that situation (and it might be true that no other cure exists).

    privacyguides.org probably has a target audience of people that are being actively targeted by sophisticated government actors, and displaying information about a measure that is inferior to another measure in every way other than cost would make it more likely that someone would use the inferior measure in an inappropriate situation, and that could cause someone to be in physical danger, so it's probably best to just not mention any measure unless it might be superior to all other measures in some situation (without considering monetary cost). For people that are subject to less physical danger but more cost restrictions, it'd probably be better to have a separate website. I do think that such a website would probably have less funding available (since privacyguides.org will probably receive funding from the audience that is mostly unencumbered by resource constraints, so any other website will probably receive less funding) and therefore less expertise available, which would be regrettable (since I do have old phones that I'd like to make more secure).

    There was a time when there was no formal recommendation for computing hardware from privacyguides.org at all, so having one at all is an improvement compared to the past. It's unfortunate that there aren't two options that meet the documented criteria, but having one is better than having none. For now, the best we can hope for is probably a phone model that meets relevant criteria (or where the only unmet criteria could be met due to new software being made available) becoming more popular, such that its price comes down due to having an economy of scale. Hopefully that will be a phone model not influenced by Google.

  • source
  • parent
  • [–] 4 points 1 year ago* (last edited 1 year ago) (1 child)

    Pixels are also running on poor hardware. This has always been the case, but recent releases are showing really poor cpu performance compared to competitors.

    Edit: for example, the OnePlus 13 that was released 8 months before the Pixel 10 Pro is 40%+ faster, and $150-250 cheaper. The battery is also 20% lower capacity.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 27 points 1 year ago (15 children)

    Somebody convince me not to say fuck it and build my own brick of a phone with an rpi5

  • source
  • hideshow 15 child comments
  • [–] 20 points 1 year ago (8 children)

    There are a few projects already in existence that might be more convenient, than an rpi5 like fairphones, and I think the grapheneos team is looking to develop something too.

  • source
  • parent
  • hideshow 8 child comments
  • [–] 2 points 1 year ago (6 children)

    Not that I have a better idea, but Graphene os devs I think were found to be scummy by Louis Rossmann at some point.

  • source
  • parent
  • hideshow 6 child comments
  • [–] 6 points 1 year ago (2 children)

    Source? Not arguing, I'm just not informed.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 6 points 1 year ago (2 children)

    Mobile telephony support just comes as a module, so that's actually the easy part.

    The harder parts are to make the whole thing consume a low enough amount of power that you can keep it running from a non-monster-sized battery, and I suspect that an RPi 5 board isn't very good for that (hobbyist development boards tend to not have been designed to avoid wasting power, even when the underlying microcontroller/processors is actually decent at it), and integrating an OS with support for a touch interface, especially if you want to avoid Android.

    I mean, it's not too hard to make a brick sized dumb phone and even have it be a mobile phone powered by AA batteries, but if you want a mobile smartphone, it gets more complex.

    Unless you have the time and skills to take up the challenge you would probably be better of getting something like a Volla phone with Ubuntu Touch or a Pine phone.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 1 point 1 year ago (1 child)

    What if you take the battery from a small laptop? It may still be bigger than a whole smartphone, but comparatively small and with some ten watt-hours.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 2 points 1 year ago*

    Even a smallish LiPo battery will give you some time. The question is how little becomes too little.

    And on the other size you can always give it more battery: after all the original mobile phones were the size of a briefcase.

    Ultimatelly how bad it is to go with a Raspberry Pi depends on how much more it with the software it has consumes than what a custom circuit designed for saving power using software configured for that (for example, not running needless services). Further, how much would, say, the extra power used in an HDMI connection over other more lower level protocols of talking to a display really matter next to the power consumption of the display itself or the GSM module, both of which tend to be big power users?

    I know for sure that if you design a custom board with a basic STM32 microprocessor and add a 2G GSM module to it, most of the consumption ends up being the 2G module anyway, so you could probably get away with just using some hobbyist board with it instead of designing your own with just what you need and a proper Voltage Converter. However I haven't really tried doing a battery powered smartphone with an ARM SBC so I don't really know for sure.

  • source
  • parent
  • [–] 4 points 1 year ago

    The region is a market where it's either Samsung, Apple, or any of the known Chinese brands -- Huawei, Redmi, OPPO, Vivo, etc. -- which sell cheaper than either of them while carrying some premium features, and unfortunately most have to buy those phones due to either FOMO or because some are very cheap. Anyone engaged in more sensitive political positions may have to keep on using dumbphones.

  • source
  • [+] 5 points 1 year ago (16 children)
  • [–] 4 points 1 year ago (15 children)

    Because Israel has shown itself to be trustworthy when it comes to software /s

  • source
  • parent
  • hideshow 15 child comments
  • [+] 0 points 1 year ago (14 children)
  • [–] 2 points 1 year ago (13 children)
  • [+] 0 points 1 year ago (12 children)
  • [–] 2 points 1 year ago (11 children)

    Yes. It's not the first time it's been done either. Then there's the loopholes as well, like Meta was doing recently.

  • source
  • parent
  • hideshow 11 child comments
  • [+] 0 points 1 year ago (10 children)
  • [–] 1 point 1 year ago (9 children)

    Sure, you tell yourself that buddy. Israel is happy for you to believe it.

  • source
  • parent
  • hideshow 9 child comments
  • [+] 0 points 1 year ago (8 children)
  • [–] 1 point 1 year ago (7 children)

    You don't have evidence that Israeli app developers can't do this either.

    It's almost as of we're lacking the money, skills, and manpower of a nation or something.

  • source
  • parent
  • hideshow 7 child comments
  • [+] 0 points 1 year ago (6 children)
  • [–] 1 point 1 year ago (5 children)

    We have evidence that they can do, simply not evidence that they're doing it currently.

    Israeli technology is already used to bypass encryption and security on both Android AND iOS. This despite the documentation showing they have security features that make them safe. Here's just some news articles talking about it over the years: https://gizmodo.com/cops-have-less-time-to-break-into-iphones-thanks-to-ios-18-1-security-measure-2000522523

    https://www.msn.com/en-in/technology/software/telangana-govt-seeks-bids-for-israeli-software-to-hack-into-phones/ar-AA1Np36m

    https://twoeva.com/2025/04/10/android-apps-spyware-exposed/

    https://www.npr.org/2024/07/17/nx-s1-5041752/what-happens-when-law-enforcement-wants-to-break-into-someones-smartphone

    https://arstechnica.com/security/2025/06/meta-and-yandex-are-de-anonymizing-android-users-web-browsing-identifiers/

    And despite it being well known by now that they're able to do this, neither Alphabet nor Apple has been able to (willing to?) stop them.

    It would be utterly naive to think that Israel can't make an app that can ignore being disabled, considering they can make software that can straight up get around literal security features allowing law enforcement to enter locked phones. The last article in particular is about bypassing system rules, quote;

    The covert tracking—implemented in the Meta Pixel and Yandex Metrica trackers—allows Meta and Yandex to bypass core security and privacy protections provided by both the Android operating system and browsers that run on it. Android sandboxing, for instance, isolates processes to prevent them from interacting with the OS and any other app installed on the device, cutting off access to sensitive data or privileged system resources. Defenses such as state partitioning and storage partitioning, which are built into all major browsers, store site cookies and other data associated with a website in containers that are unique to every top-level website domain to ensure they're off-limits for every other site.

    Basically, you'd have to e stupid to think that a system saying "permission not allowed" is enough to stop a maliciously intended app, but even more stupid to think Israeli backed technology can't, considering the existence of tools like Pegasus and the past operations and actions of Mossad, along with so many governments adopting Palantir.

    At best, you're blissfully ignorant of things, at worst you're part of the problem, to think this pre-installed app can simply be stopped by disabling it. If they seek to spy on you, a disablement isn't going to stop them. It's laughable you think it is. That you think it isn't, really shows how little you actually know or understand the technology.

  • source
  • parent
  • hideshow 5 child comments
  • [+] 0 points 1 year ago (4 children)
  • [–] 1 point 1 year ago (3 children)

    Okay now I know you're arguing in bad faith. Not only were 2 of the articles about apps on a phone and not external Israeli software, but over half my comment was about on-phone software bypassing permissions.

    Goodbye.

  • source
  • parent
  • hideshow 3 child comments
  • [+] 0 points 1 year ago (2 children)
  • [+] -1 points 1 year ago (1 child)
  • [–] -1 points 1 year ago (5 children)

    I have yet to run into spyware that couldn't easily be uninstalled with a few ADB commands.

    That is unless—of course—you consider OneUI/Android itself to be spyware (which it is). Privacy in the modern world is dead. It has been for over 20 years now.

  • source
  • hideshow 5 child comments
  • [–] 2 points 1 year ago (4 children)

    Nah, laptops can be absolutely safe. I recommended TAILS or QubesOS

  • source
  • parent
  • hideshow 4 child comments
  • [–] 5 points 1 year ago* (3 children)

    Tails is amazing and I'm glad we have something like that, but it is not practical for every day use. And to be fair, it's not meant to be. It literally runs off a flash drive.

  • source
  • parent
  • hideshow 3 child comments
  • 3 comments in c/privacy@lemmy.ml view that post
    [–] 15 points 11 months ago

    I'd be concerned that any phone company that works with Israel might modify their phones to explode.

  • source
  • [–] 12 points 11 months ago

    Israelis deserve all of the ire coming their way.

  • source
  • [–] 6 points 11 months ago

    "For our next terrorism we need something better than exploding pagers. Does anyone know a company that does exploding phones?"

  • source