Xiaomi Is Vulnerable - Automatic App Installation

Xioami back-door detected where it can install Any App

Xiaomi which is also known by name MI a china based company founded in 2010 and getting biggest brand in couples of year. Xiaomi is famous for their cheap smartphones with better hardware. They are now a 4th largest smartphone making company in the world.

Xiaomi expected to launch their new smartphone Mi 5 on September 27. Which will come with some new features better camera update etc.

As Xiaomi going to launched their new phone in this month a news certainly spread everywhere that it xiaomi can download any app in your smartphone without any permission automatically

Thijs Broenink, a Computer Science student from Netherlands. He spell out that Xiaomi’s AnalyticsCore.apk constanly running on the background of smartphone and it's still go on even if you delete it from the smartphone.

Broenink research those codes and found that the app which checks for updates from Xiaomi every 24 hours, and sends all kinds of information to Xiaomi’s servers. This app also automatically installs the update from Xiaomi’s servers, if it finds it there, the update’s file is named ‘Analytics.apk

So these updates will install automatically in your android device without your permission which is so much weird about this phone

What Xiaomi say about this

"AnalyticsCore is a built-in MIUI system component that is used by MIUI components for the purpose of data analysis to help improve user experience, such as MIUI Error Analytics. As a security measure, MIUI checks the signature of the Analytics app during installation or upgrade to ensure that only the APK with the official and correct signature will be installed. Any APK without an official signature will fail to install. As AnalyticsCore is key to ensuring better user experience, it supports a self-upgrade feature. Starting from MIUI V7.3 released in April/May, HTTPS was enabled to further secure data transfer, to prevent any man-in-the-middle attacks."