logo

Security flaws found in tiny phones promoted to children

ID: 0a681f04-e572-5780-8202-caf8d68b1d4c

STIX ID: report--0a681f04-e572-5780-8202-caf8d68b1d4c

Feed Name: Pen Test Partners Blog

Threat Score

Date Published: 2025-01-15

Date Updated: 2026-03-24

Author: Joe Lovett

...
...

Researchers examined three budget mini smartphones (SOYES S7, ZOKOE XS13, Hipipooo) marketed to children and found all ran unsupported Android versions and were locally exploitable via MediaTek chipset flaws using mtkclient to read/write partitions and root without wiping data; the SOYES S7 contained preinstalled Domino malware artifacts (smsdamon, smsservice) linked to adware/downloader behavior, and the ZOKOE XS13 included an EngineerMode app capable of changing the device IMEI, while the Hipipooo showed no immediate additional flaws beyond age; the report warns these devices pose significant security and privacy risks and advises purchasing up-to-date phones from trusted vendors.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.