{"id":6342,"date":"2019-05-20T07:49:48","date_gmt":"2019-05-20T07:49:48","guid":{"rendered":"https:\/\/www.upstreamsystems.com\/press\/press-releases\/secure-d-exposes-suspicious-android-app-with-500-million-downloads\/"},"modified":"2023-05-08T11:12:31","modified_gmt":"2023-05-08T11:12:31","slug":"secure-d-exposes-suspicious-android-app-with-500-million-downloads","status":"publish","type":"press_release","link":"https:\/\/www.upstreamsystems.com\/pt-br\/press\/press-releases\/secure-d-exposes-suspicious-android-app-with-500-million-downloads\/","title":{"rendered":"Secure-D exposes suspicious Android app with 500 million downloads"},"content":{"rendered":"

Upstream\u2019s security platform blocks 130 million suspicious mobile transactions initiated by popular Android video downloader<\/em><\/p>\n

VidMate hijacks mobile devices, eats up data, incurs unwanted charges & collects personal user info, potentially affecting over half a billion users<\/em><\/p>\n

London, May 20th<\/span>, 2019\u00a0\u00a0<\/strong>\u2013 Upstream, a leading mobile technology company, has unveiled that the popular Android application VidMate triggers suspicious background activity. Hidden software within the app delivers invisible ads, generates fake clicks and purchases, installs other suspicious apps without consent and collects personal users\u2019 information. Consequently, it depletes users\u2019 data allowance and brings unwanted charges.<\/p>\n

With over 500 million downloads reported, VidMate is a popular Android application for streaming and downloading videos and songs from services such as Dailymotion, Vimeo, and YouTube. It is not available in the Google Play Store but is distributed through third-party app stores like CNET or Uptodown. According to publicly available information, VidMate was developed by a subsidiary of UC Web, which is owned by Chinese conglomerate Alibaba.<\/p>\n

\"\"<\/a><\/p>\n

Over a recent period Upstream\u2019s security platform, Secure-D<\/a>, detected and blocked nearly 130 million suspicious mobile transactions initiated by VidMate. These transactions originated from close to 5 million unique mobile devices across 15 countries. If not blocked, they would have subscribed users to premium digital services potentially costing them up to $170m in unwanted charges.<\/p>\n

Guy Krief, CEO of Upstream, commented: <\/strong> \u201cMobile advertising is a multi-billion dollar industry on the rise and a very fertile ground for fraud. The VidMate example, whereby a single app is responsible for 130 million suspicious transaction attempts over a few months, is cause for great concern. The growing sophistication of disguised malware calls for an ever more vigilant approach. In the fight against digital fraud ongoing technological innovation is key\u201d.<\/em><\/p><\/blockquote>\n

Most of the suspicious activity, which is still ongoing, was largely centered in 15 countries. 43 million of the suspicious transactions flagged by Secure-D are coming from devices in Egypt, 27 million from Myanmar, 21 million from Brazil, 10 million from Qatar, and 8 million from South Africa. Among the top affected markets are also Ethiopia, Nigeria, Malaysia and Kuwait. These are countries where digital payments via mobile airtime are common and often the only way to make financial transactions, as most people are unbanked.<\/p>\n

The Secure-D lab tests also revealed that VidMate consumes battery life and bandwidth, eating up more than 3GB of data per month. That could add up to users paying $100 a year in mobile data charges. In markets such as Brazil, this represents nearly half a month\u2019s work paid at minimum wage.<\/p>\n

Finally, the Secure-D investigation found that -at the time of the investigation- VidMate collected personal user information, such as International Mobile Equipment Identity (IMEI), International Mobile Subscriber Identity (IMSI) or IP address, and transferred them to servers in Singapore, belonging to Nonolive, a China-based company funded by Alibaba, according to publicly available information.<\/p>\n

\u201cVidMate is only one case. Secure-D detects more than 170 new malicious apps every day\u201d,<\/em> added Krief. \u201cWhile mobile fraud is mostly targeting advertisers, it also affects consumers greatly; Eats up their data allowance, brings unwanted charges, messes with the performance of their device, targets and collects user personal data. It is an epidemic calling for increased mobile security that urgently needs to rise up in the industry\u2019s priority list\u201d.<\/em><\/p><\/blockquote>\n

For the full report on the investigation & further resources please\u00a0click here<\/a><\/em><\/strong>
\n Upstream has worked with BuzzFeed News to bring this story to light. You can read their write-up\u00a0here<\/a><\/em><\/strong><\/p>\n

###<\/p>\n

For more information please contact:<\/strong>
\nUpstream Corporate Communications
\n\u0395: corp.comms@upstreamsystems.com
\nP: +30210 6618532 +30210 6618507<\/p>\n","protected":false},"excerpt":{"rendered":"

Upstream, a leading mobile technology company, has unveiled that the popular Android application VidMate triggers suspicious background activity…<\/p>\n","protected":false},"author":12,"featured_media":5712,"parent":0,"template":"","tags":[535,536,537,538,539,382,540,541,542,370,543,544,545,546,547],"acf":[],"yoast_head":"\nSecure-D exposes suspicious Android app with 500 million downloads - Upstream<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.upstreamsystems.com\/pt-br\/press\/press-releases\/secure-d-exposes-suspicious-android-app-with-500-million-downloads\/\" \/>\n<meta property=\"og:locale\" content=\"pt_PT\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Secure-D exposes suspicious Android app with 500 million downloads - Upstream\" \/>\n<meta property=\"og:description\" content=\"Upstream, a leading mobile technology company, has unveiled that the popular Android application VidMate triggers suspicious background activity...\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.upstreamsystems.com\/pt-br\/press\/press-releases\/secure-d-exposes-suspicious-android-app-with-500-million-downloads\/\" \/>\n<meta property=\"og:site_name\" content=\"Upstream\" \/>\n<meta property=\"article:modified_time\" content=\"2023-05-08T11:12:31+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.upstreamsystems.com\/wp-content\/uploads\/2021\/07\/SecureD-Upstream-VidMate-scaled.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"6000\" \/>\n\t<meta property=\"og:image:height\" content=\"3491\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.upstreamsystems.com\/#organization\",\"name\":\"Upstream\",\"url\":\"https:\/\/www.upstreamsystems.com\/\",\"sameAs\":[],\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"pt-BR\",\"@id\":\"https:\/\/www.upstreamsystems.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.upstreamsystems.com\/wp-content\/uploads\/2021\/07\/brand.svg\",\"contentUrl\":\"https:\/\/www.upstreamsystems.com\/wp-content\/uploads\/2021\/07\/brand.svg\",\"width\":135,\"height\":38,\"caption\":\"Upstream\"},\"image\":{\"@id\":\"https:\/\/www.upstreamsystems.com\/#\/schema\/logo\/image\/\"}},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.upstreamsystems.com\/#website\",\"url\":\"https:\/\/www.upstreamsystems.com\/\",\"name\":\"Upstream\",\"description\":\"The leading martech company\",\"publisher\":{\"@id\":\"https:\/\/www.upstreamsystems.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.upstreamsystems.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"pt-BR\"},{\"@type\":\"ImageObject\",\"inLanguage\":\"pt-BR\",\"@id\":\"https:\/\/www.upstreamsystems.com\/pt-br\/press\/press-releases\/secure-d-exposes-suspicious-android-app-with-500-million-downloads\/#primaryimage\",\"url\":\"https:\/\/www.upstreamsystems.com\/wp-content\/uploads\/2021\/07\/SecureD-Upstream-VidMate-scaled.jpg\",\"contentUrl\":\"https:\/\/www.upstreamsystems.com\/wp-content\/uploads\/2021\/07\/SecureD-Upstream-VidMate-scaled.jpg\",\"width\":6000,\"height\":3491},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.upstreamsystems.com\/pt-br\/press\/press-releases\/secure-d-exposes-suspicious-android-app-with-500-million-downloads\/#webpage\",\"url\":\"https:\/\/www.upstreamsystems.com\/pt-br\/press\/press-releases\/secure-d-exposes-suspicious-android-app-with-500-million-downloads\/\",\"name\":\"Secure-D exposes suspicious Android app with 500 million downloads - Upstream\",\"isPartOf\":{\"@id\":\"https:\/\/www.upstreamsystems.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.upstreamsystems.com\/pt-br\/press\/press-releases\/secure-d-exposes-suspicious-android-app-with-500-million-downloads\/#primaryimage\"},\"datePublished\":\"2019-05-20T07:49:48+00:00\",\"dateModified\":\"2023-05-08T11:12:31+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/www.upstreamsystems.com\/pt-br\/press\/press-releases\/secure-d-exposes-suspicious-android-app-with-500-million-downloads\/#breadcrumb\"},\"inLanguage\":\"pt-BR\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.upstreamsystems.com\/pt-br\/press\/press-releases\/secure-d-exposes-suspicious-android-app-with-500-million-downloads\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.upstreamsystems.com\/pt-br\/press\/press-releases\/secure-d-exposes-suspicious-android-app-with-500-million-downloads\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.upstreamsystems.com\/pt-br\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Press Release\",\"item\":\"https:\/\/www.upstreamsystems.com\/pt-br\/press\/press-releases\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Secure-D exposes suspicious Android app with 500 million downloads\"}]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Secure-D exposes suspicious Android app with 500 million downloads - Upstream","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.upstreamsystems.com\/pt-br\/press\/press-releases\/secure-d-exposes-suspicious-android-app-with-500-million-downloads\/","og_locale":"pt_PT","og_type":"article","og_title":"Secure-D exposes suspicious Android app with 500 million downloads - Upstream","og_description":"Upstream, a leading mobile technology company, has unveiled that the popular Android application VidMate triggers suspicious background activity...","og_url":"https:\/\/www.upstreamsystems.com\/pt-br\/press\/press-releases\/secure-d-exposes-suspicious-android-app-with-500-million-downloads\/","og_site_name":"Upstream","article_modified_time":"2023-05-08T11:12:31+00:00","og_image":[{"width":6000,"height":3491,"url":"https:\/\/www.upstreamsystems.com\/wp-content\/uploads\/2021\/07\/SecureD-Upstream-VidMate-scaled.jpg","type":"image\/jpeg"}],"twitter_card":"summary_large_image","schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Organization","@id":"https:\/\/www.upstreamsystems.com\/#organization","name":"Upstream","url":"https:\/\/www.upstreamsystems.com\/","sameAs":[],"logo":{"@type":"ImageObject","inLanguage":"pt-BR","@id":"https:\/\/www.upstreamsystems.com\/#\/schema\/logo\/image\/","url":"https:\/\/www.upstreamsystems.com\/wp-content\/uploads\/2021\/07\/brand.svg","contentUrl":"https:\/\/www.upstreamsystems.com\/wp-content\/uploads\/2021\/07\/brand.svg","width":135,"height":38,"caption":"Upstream"},"image":{"@id":"https:\/\/www.upstreamsystems.com\/#\/schema\/logo\/image\/"}},{"@type":"WebSite","@id":"https:\/\/www.upstreamsystems.com\/#website","url":"https:\/\/www.upstreamsystems.com\/","name":"Upstream","description":"The leading martech company","publisher":{"@id":"https:\/\/www.upstreamsystems.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.upstreamsystems.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"pt-BR"},{"@type":"ImageObject","inLanguage":"pt-BR","@id":"https:\/\/www.upstreamsystems.com\/pt-br\/press\/press-releases\/secure-d-exposes-suspicious-android-app-with-500-million-downloads\/#primaryimage","url":"https:\/\/www.upstreamsystems.com\/wp-content\/uploads\/2021\/07\/SecureD-Upstream-VidMate-scaled.jpg","contentUrl":"https:\/\/www.upstreamsystems.com\/wp-content\/uploads\/2021\/07\/SecureD-Upstream-VidMate-scaled.jpg","width":6000,"height":3491},{"@type":"WebPage","@id":"https:\/\/www.upstreamsystems.com\/pt-br\/press\/press-releases\/secure-d-exposes-suspicious-android-app-with-500-million-downloads\/#webpage","url":"https:\/\/www.upstreamsystems.com\/pt-br\/press\/press-releases\/secure-d-exposes-suspicious-android-app-with-500-million-downloads\/","name":"Secure-D exposes suspicious Android app with 500 million downloads - Upstream","isPartOf":{"@id":"https:\/\/www.upstreamsystems.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.upstreamsystems.com\/pt-br\/press\/press-releases\/secure-d-exposes-suspicious-android-app-with-500-million-downloads\/#primaryimage"},"datePublished":"2019-05-20T07:49:48+00:00","dateModified":"2023-05-08T11:12:31+00:00","breadcrumb":{"@id":"https:\/\/www.upstreamsystems.com\/pt-br\/press\/press-releases\/secure-d-exposes-suspicious-android-app-with-500-million-downloads\/#breadcrumb"},"inLanguage":"pt-BR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.upstreamsystems.com\/pt-br\/press\/press-releases\/secure-d-exposes-suspicious-android-app-with-500-million-downloads\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.upstreamsystems.com\/pt-br\/press\/press-releases\/secure-d-exposes-suspicious-android-app-with-500-million-downloads\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.upstreamsystems.com\/pt-br\/"},{"@type":"ListItem","position":2,"name":"Press Release","item":"https:\/\/www.upstreamsystems.com\/pt-br\/press\/press-releases\/"},{"@type":"ListItem","position":3,"name":"Secure-D exposes suspicious Android app with 500 million downloads"}]}]}},"_links":{"self":[{"href":"https:\/\/www.upstreamsystems.com\/pt-br\/wp-json\/wp\/v2\/press_release\/6342"}],"collection":[{"href":"https:\/\/www.upstreamsystems.com\/pt-br\/wp-json\/wp\/v2\/press_release"}],"about":[{"href":"https:\/\/www.upstreamsystems.com\/pt-br\/wp-json\/wp\/v2\/types\/press_release"}],"author":[{"embeddable":true,"href":"https:\/\/www.upstreamsystems.com\/pt-br\/wp-json\/wp\/v2\/users\/12"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.upstreamsystems.com\/pt-br\/wp-json\/wp\/v2\/media\/5712"}],"wp:attachment":[{"href":"https:\/\/www.upstreamsystems.com\/pt-br\/wp-json\/wp\/v2\/media?parent=6342"}],"wp:term":[{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.upstreamsystems.com\/pt-br\/wp-json\/wp\/v2\/tags?post=6342"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}