Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

Have there been any instances of malware or spyware packaged in custom ROMs, for example a malicious email app pre-installed that records your server IMAP username and password and forwards it to a 3rd part? Or part of the kernel that takes periodic photos? With regard to custom ROMs, I mean official and unofficial releases such as Cyanogenmod, AOKP, LiquidSmooth, etc.

share|improve this question
1  
It's at least very possible, but I can't confirm this so far. –  Lucas Kauffman Oct 15 '13 at 6:05
1  
Do OEM ROMs with Carrier IQ count? Not intended as malware originally (it was meant to collect usage statistics and debugging data, and not to send any private or identifying data off the device), but it ended up exposing a lot on some devices. –  Gilles Oct 16 '13 at 18:07
    
I have since discovered all ROMs have malware because NSA. –  Chloe Jan 3 at 19:44
add comment

1 Answer

up vote 4 down vote accepted

Not in any of the popular ones as far as I've heard. But you're free to build one yourself, which would then mean that it has happened.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.