NetEase's MuMu Player Pro for macOS Collects Extensive System Data Without Disclosure
By
interpidused
Kettled twice. Extra chewy, extra trustworthy.
Summary
MuMu Player Pro, an Android emulator for macOS developed by NetEase, has been found to execute 17 system reconnaissance commands every 30 minutes while running. This undisclosed data collection includes enumerating all devices on the local network, capturing every running process with full command-line arguments, inventorying all installed applications, reading the hosts file, and dumping kernel parameters. All collected data is tied to the Mac's serial number via SensorsData analytics, raising significant privacy concerns as none of this activity is disclosed in the software's privacy policy.
Key quotes
· 4 pulledMuMu Player Pro for macOS (by NetEase) executes a comprehensive system data collection routine every 30 minutes while the emulator is running.
This includes enumerating all devices on your local network, capturing every running process with full command-line arguments, inventorying all installed applications, reading your hosts file, and dumping kernel parameters.
All collected data is tied to your Mac's serial number via SensorsData analytics.
None of this is disclosed in MuMu's privacy policy.
You might also wanna read
Claude Desktop Preauthorizes Browser Extension Access on macOS, Raising Privacy Concerns
Anthropic's Claude Desktop for macOS installs a Native Messaging manifest file that pre-authorizes the Claude browser extension and two othe
letsdatascience.com·1mo ago
Pentagon Confirms Adversaries Using Commercial Phone Location Data to Target US Troops
The Pentagon was warned for nearly a decade that commercial location data from mobile phones could be exploited by adversaries to track US m
wired.com·1d ago
New browser-based side-channel attack uses SSD activity analysis to spy on users
Researchers have discovered a new browser-based side-channel attack that can spy on users by analyzing SSD (Solid State Drive) activity thro
arstechnica.com·1d ago
New FROST technique lets websites track visitors by analyzing SSD activity
A new tracking technique called FROST (fingerprinting remotely using OPFS-based SSD timing) allows websites to spy on visitors by analyzing
23.social·3d ago
Trump Mobile investigates data leak exposing customer names and contact details
A potential security flaw on Trump Mobile's website may have exposed personal information (names, emails, addresses, phone numbers) of thous
independent.co.uk·4d ago
Third-party UK Visa Portal exposed 100,000+ applicants' passports and selfies online
A third-party website called UK Visa Portal, which is not affiliated with the U.K. government, has been publicly exposing the passports and
techcrunch.com·4d ago