logo

Preinstalled Motorola App Hijacks Amazon to Inject Affiliate Codes

ID: 4c0031aa-fc74-5166-ab6c-b93db183a6f2

STIX ID: report--4c0031aa-fc74-5166-ab6c-b93db183a6f2

Feed Name: Cyber Press

Threat Score
35/100

Date Published: 2026-05-28

Date Updated: 2026-05-28

Author: Lucas Martin

...
...

A hidden preinstalled Motorola system app (com.motorola.smartfeed) in Smart Feed v2.03.0070 was observed intercepting Amazon app launches from the app drawer and redirecting users through devicenative.com to Amazon with an injected affiliate code (sramz-kff-008-20) tied to kira-abboud.com, allowing third-party commission skimming; the behavior was confirmed via ADB logcat, is device/version-specific, and Motorola states the routing configuration was corrected while mitigations (disabling Smart Feed, blocking devicenative.com, changing default link handling) are available.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.