Over the past couple of months, Trustlook Mobile Security has published a lot of research (here and here) about ADUPS spyware. It is no surprise we have received many inquiries about the latest ADUPS security vulnerability involving the Barnes & Noble Nook 7. You may or may not know that the $50 Barnes & Noble device was shipping with Adups backdoor-planting firmware preinstalled.
We are happy to announce that Barnes and Noble has got a fix. The company has also issued the following statement regarding the issue.
“NOOK Tablet 7” went on sale on November 26. By that time, the device automatically updated to a newer version of ADUPS (5.5), which has been certified as complying with Google’s security requirements, when first connected to Wi-Fi. ADUPS has confirmed to Barnes & Noble that it never collected any personally identifiable information or location data from NOOK Tablet 7” devices, nor will it do so in the future.
Finally, we are working on a software update to remove ADUPS completely from the NOOK Tablet 7”. That update will be made available to download within the next few weeks, but in the meantime customers can rest assured that the device is safe to use.”
Whew! To think that you could have been sending your most private information to servers in China while you were reading your favorite novel was quite concerning.