Qualcomm’s Snapdragon processors are secretly collecting data from Android users

Nitrokey experts have ruled out that Qualcomm processors collect data from Android users.

In a published study, they became infected with several smartphones purged of Google services. These cases are used by some users who do not get Google to receive any information from them.

During testing, a custom Android assembly of Sony Xperia XA2 called /e/OS was launched, completely cleared of “Google services”, it does not have mechanisms for implementing actions from the company.

A few seconds later, the gadget appeared on the izatcloud.net address. It was revealed that it is run by Qualcomm, which sends data to its own mysterious cloud called Izat Cloud. At the same time, information at this address is located at insecure HTTP protocolthat is, anyone can access it.

Here’s what Qualcomm collects about you:

• application of device ID

• chipset name

• chipset serial number

• XTRA software version

• mobile country code

• mobile network code (lets happen country and wireless carrier)

• system polling type and version

• make and model of the device

• time since the last boot of the processor and modem

• list of installed software in meetings

• Device IP address

As prominent specialists, the Qualcomm XTRA service is found among the Qualcomm firmware called AMSS (needed for processors to work). It completely detected the network equipment of the smartphone, as well as the microphone and camera.

It is noted that even after the complete removal of AMSS surveillance services, the above information will be sent to Qualcomm.

Nitrokey experts said that such an action on the part of the consideration of the application for data protection (GDPR). In response, Qualcomm’s lawyers said the data collection is legal and does not disclose the privacy of Qualcomm XTRA. [Nitrokey]