Another commenter reviewed decompiled code from the APK:
> I also did a quick passthrough of the decompiled code. There is logic there to upload log files and send phone information (IMEI, MAC, AndroidID, SerialNo). What's really nice is that most of their APIs use HTTP, not HTTPS!
Unless you can catch it sending sensitive information it could just be jet another normal crapware doing crapware things (some telemetry, bloaty updates etc.) but nothing truly malicious, no?
> I also did a quick passthrough of the decompiled code. There is logic there to upload log files and send phone information (IMEI, MAC, AndroidID, SerialNo). What's really nice is that most of their APIs use HTTP, not HTTPS!
https://www.reddit.com/r/Android/comments/ektg8u/chinese_spy...