Amazon said it's suspending sales of Android phones made by Blu following a presentation last week that said that three of the manufacturer's models sent sensitive personal information to third parties in China.
Last week's presentation at the Black Hat security conference in Las Vegas by security firm Kryptowire came eight months after the same company first warned about Android devices sold by Blu. That earlier report said the low-cost phones sent massive amounts of personal data about the phones and their users’ activities to servers that were owned by AdUps Technologies, a China-based firmware update provider.
The data sent to AdUps servers at the time included the full body of text messages, contact lists, call histories with full telephone numbers, unique device identifiers including the International Mobile Subscriber Identity and the International Mobile Equipment Identity. AdUps officials responded by saying the data collection was a mistake and was being curbed. At Black Hat, however, Kryptowire researcher Ryan Johnson said that three models of Blu phones continued to collect a more limited set of users' personal information. Earlier this week, Amazon officials responded by saying that the online store will stop selling the manufacturer's devices until the issues are fixed.