Blu’s unlocked Android smartphones are a noteworthy bargain, offering decent hardware in a range of models for between $50 – $110 across the US and Latin America. Unfortunately, they’re not so great when it comes to privacy. US-based security firm Kryptowire said that it discovered firmware in several Blu phones that beamed across users’ text messages, contact lists, call history and device information to a server in Shanghai, without their knowledge or permission. Said firmware also allowed for remotely installing apps on users’ devices and collecting location data. How did this happen? Blu used a third-party software system to deliver…

This story continues at The Next Web