BLU settles with FTC over unauthorized transmission of personal customer data to China

Security firm Kryptowire found that ADUPS firmware preinstalled on BLU phones periodically transmitted sensitive user data — including full text message content, real‑time location, call/text logs with numbers, contact lists, and app usage — to servers in China; because the update software ran with elevated permissions it could also reprogram devices and contained vulnerabilities that could allow full device compromise. The FTC investigated and filed a complaint, alleging BLU failed to adequately oversee its third‑party provider and misled consumers, and the company agreed to a proposed settlement requiring long‑term security controls and third‑party assessments.