Weird security problem with Suretap - seems to be sending international SMS messages

Need Help?

That's what we're here for! The goal of the Rogers Community is to help you find answers on everything Rogers. Can't find what you're looking for? Just ask!
cancel
Showing results for 
Search instead for 
Did you mean: 
Reply
Highlighted
I Plan to Stick Around
Posts: 80

Weird security problem with Suretap - seems to be sending international SMS messages

Has anyone else had probvlems with international SMS messages being sent....

 

Since early April - (when I had an update to Suretap or my BlackBerry OS I believe) - I've seemed to have been sending SMS messages without my knowledge on each reboot of my BlackBerry Z30  (a number of them).

 

I'm running a BlackBerry Z30 running 10.3 

 

Suretap seems to generate log files in the BlackBerry misc directory.... looking in the log I see details like this....

 

[I have redacted the LOOKUP ID and the last few digits of the destination]

 

 

May 18 05:08:19 2015 0 R<>NFCProxy<> get_instance()
May 18 05:08:19 2015 0 R<>NFCProxy<> constructor()
May 18 05:08:19 2015 0 R<>NFCWalletController<> constructor()
May 18 05:08:19 2015 0 R<>NFCProxy<> initNFCServices() 5 1.0.1401007
May 18 05:08:19 2015 0 R<>NFCWalletController<> init()
May 18 05:08:19 2015 0 R<>NFCWalletController<> taskqueue() task: 1001
May 18 05:08:19 2015 0 R<>NetworkStatus<> event()
May 18 05:08:19 2015 0 R<>NetworkStatus<> event() type: success: wifi: 0 -1 false
May 18 05:08:19 2015 0 R<>NFCWalletController<> run()
May 18 05:08:19 2015 0 R<>NFCWalletController<> run() task: 1001 started
May 18 05:08:19 2015 0 R<>RegisterWalletController<> startRegistrationProcess()
May 18 05:08:19 2015 0 R<>SmartCardConnectionController<> open_session()
May 18 05:08:19 2015 0 R<>SmartCardConnectionController<> get_reader()
May 18 05:08:19 2015 1 R<>SmartCardConnectionController<> get_reader() Exception place: 1305 nfc_res: 8
May 18 05:08:19 2015 0 R<>SmartCardConnectionController<> close_session() session: 0
May 18 05:08:19 2015 0 R<>SmartCardConnectionController<> getSEID() seid: NFC_NOT_SUPPORTED
May 18 05:08:19 2015 0 R<>PhoneData<> constructor()
May 18 05:08:19 2015 0 R<>NFCWalletController::RegWalletControllerResponseListener<> execute() aActionID: 950
May 18 05:08:19 2015 0 R<>NFCWalletController<> appfeedback() 101 950
May 18 05:08:19 2015 0 R<>RegisterWalletController::InitiateRegistrationResultListener<> constructor()
May 18 05:08:19 2015 0 R<>RegisterWalletController<> startRegistrationProcessWithInitialHttpHeaderCheck() start Reg. with analyzer
May 18 05:08:19 2015 0 R<>QueueManager<> constructor()
May 18 05:08:19 2015 0 R<>InitiateRegistrationCheck<> constructor()
May 18 05:08:19 2015 0 R<>InitiateRegistrationCheck<> implement() url = http://staginggateway.enstreamtsm.com/enstream-nfc-request-analyzer/analyze?id=999Z9Z99ZZZ9999999999...
May 18 05:08:19 2015 1 R<>InitiateRegistrationCheck<> implement() Exception place = 1203
May 18 05:08:19 2015 1 R<>InitiateRegistrationCheck<> implement() Exception res = 6 Couldn't resolve host name
May 18 05:08:19 2015 0 R<>InitiateRegistrationCheck<> implement() Initiate registration - failed, cannot detect the number.
May 18 05:08:19 2015 0 R<>RegisterWalletController::InitiateRegistrationResultListener<> execute()
May 18 05:08:19 2015 0 R<>SmartCardConnectionController<> open_session()
May 18 05:08:19 2015 0 R<>SmartCardConnectionController<> get_reader()
May 18 05:08:19 2015 1 R<>SmartCardConnectionController<> get_reader() Exception place: 1305 nfc_res: 8
May 18 05:08:19 2015 0 R<>SmartCardConnectionController<> close_session() session: 0
May 18 05:08:19 2015 0 R<>SmartCardConnectionController<> getSEID() seid: NFC_NOT_SUPPORTED
May 18 05:08:19 2015 0 R<>NFCWalletController::RegWalletControllerResponseListener<> execute() aActionID: 959
May 18 05:08:19 2015 0 R<>NFCWalletController<> appfeedback() 101 959
May 18 05:08:19 2015 0 R<>NFCWalletController::RegWalletControllerResponseListener<> execute() registration data&colon; Cannot get SEID
May 18 05:08:19 2015 0 R<>NFCWalletController<> appfeedback() 103 0 Cannot get SEID
May 18 05:08:19 2015 0 R<>MsgObject<> constructor()
May 18 05:08:19 2015 0 R<>HttpSendReceive<> constructor()
May 18 05:08:19 2015 0 R<>MsgObject<> constructor()
May 18 05:08:19 2015 0 R<>RegisterWalletController<> initiateSMSVerificationProcess()
May 18 05:08:19 2015 0 R<>VerificationSMSHandler<> constructor()
May 18 05:08:19 2015 0 R<>VerificationSMSHandler<> startPhoneVerificationProcess() 999Z9Z99ZZZ999999999999999Z97Z

May 18 05:08:19 2015 0 R<>VerificationSMSHandler<> send_sms() address: NFC_NOT_SUPPORTED msg: LOOKUP_ID=999Z9Z99ZZZ999999999999999Z97Z
May 18 05:08:19 2015 0 R<>VerificationSMSHandler<> send_sms() res: 0
May 18 05:08:20 2015 0 R<>ResponseProcessor<> sendRequest() xmlString = <payload><lookupId>999Z9Z99ZZZ999999999999999Z97Z</lookupId><simError>NFC_NOT_SUPPORTED</simError><errorDetails></errorDetails></payload></message>
May 18 05:08:20 2015 0 R<>MsgObject<> setHeaderOperation() SIM_ERROR_SUMMARY

......

(continues with similar) ..... 


and - at the same time a text message is sent by Suretap (I have extreme text messaging setup so I am copied on the texts to a special email address I have ) (Note the content of the text message has the same LOOKUP_ID as what appears in the Suretap log file!) ....


To: 632668787799999
LOOKUP_ID=999Z9Z99ZZZ999999999999999Z97Z


I don't know if this is a real SMS destination (it might be a Philipines phone number) - either way Rogers wants to charge me for an international text and it uses one of my international text quota.

 

As I said - this happens every time I reboot. The first six characters of the LOOKUP_ID seem to change on a reboot.

 

Why is this happening? Is the BlackBerry Suretap executable infected with a virus or similar???? 

 

If I remove the suretap application from the Blackberry - this sending of SMS messages stops.

 

I've revoked the ability for Suretap to send and receive SMS messages in permissions and it stops sending SMS messages on each reboot - so I'm fairly certain this is coming from the Suretap executable. 

 

Will revoking this permission make Suretap stop working?

 

Is anyone else seeing behaviour like this - between April 5th and end of April if seemed to send 16 international text messages!

 

Please advise.

 

thanks,

 

PHT

 

***Edited Labels***

Moderator
Moderator
Posts: 1,547

Re: Weird security problem with Suretap - seems to be sending international SMS messages

Hello @hopetindall,


Thank you for your post, we can definitely consult Suretap security team for the clarification of log file posted. Please look out for the communication from @CommunityHelps.


Personally, I see that Suretap is establishing a 2 way secure NFC connection upon reboot, seems to be a normal routine task.


While we investigate, @Community please chime in if you have noticed similar log file(s) in Z30 or any other device where Suretap is being used. Your help is appreciated.Smiley Happy


Thanks,
RogersMoin

I Plan to Stick Around
Posts: 80

Re: Weird security problem with Suretap - seems to be sending international SMS messages

Hi Rogers,

 

I appreciate suretap is still looking into this - but can you please give an update given the seriousness.

 

Do you think the Suretap executable contains some kind of malware - or is this SMS behaviour something which is expected from Suretap on reboot (and the billing is in error).

 

thanks,

PHT

Moderator
Moderator
Posts: 1,547

Re: Weird security problem with Suretap - seems to be sending international SMS messages

Hello @hopetindall,

 

Thank you for your patience while Suretap is looking into the log files. It was confirmed about the SMS texts which show in the log files are not international numbers but Suretap is accessing internal Rogers’ components.

 

The log file also contains components from other application, do you happen to also use Ugo wallet? Would you please confirm this at the earliest.

 

As for the international SMS texts usage clarification, we will have a specialist from @CommunityHelps contact you.Smiley Happy

 

Thanks,

RogersMoin

I Plan to Stick Around
Posts: 80

Re: Weird security problem with Suretap - seems to be sending international SMS messages

Thank you. Please note these ARE counting on my bill as international texts. I can watch them go by and decrement my 100 text bucket. They sure on my invoice too. I can also stop the using of international text allowance by revoking the ability of Suretap to access SMS. I do not know what ugo wallet is and I dont have it installed on my BlackBerry.
Moderator
Moderator
Posts: 1,547

Re: Weird security problem with Suretap - seems to be sending international SMS messages

Hello @hopetindall,


Thank you for the updates. Please find all the details about SMS texts in your PM. Basically, all the SMS texts you would notice happens when the device is rebooted and its expected behaviour as they are not in fact SMS's, they are what's known as a 'Call'.

 

It's the code at which the app uses to reach out to the Rogers Network for a specific action. We have confirmed those are not international texts. Hope this helps.

 

Thanks,

RogersMoin

I Plan to Stick Around
Posts: 80

Re: Weird security problem with Suretap - seems to be sending international SMS messages

Thanks.

 

 

I'll keep checking for a Suretap update - and I'll ignore the scary SMS messages that appear in my sent folder until this is fixed.

 

As you noted in your PM - I've been under my bucket of international texts each month; no I haven't actually been charged for anything.

 

Screenshot 2015-05-26 19.58.45.png

 

 

What was really scary was the number appearing in the sent texts is a Philippines number!  - 632668787767833 which appeared to be sending information halfway around the world!

 

It's reassuring to know that this isn't Malware.

 

btw (in case you get more queries) - someone posted a similar message over on Crackberry with similar payload in the message.

 

"http://forums.crackberry.com/blackberry-q10-f272/why-my-q10-sending-messages-sms-9008-a-1017199/"

 

 

Best Regards - and thank you for looking into this.

 

PHT

I Plan to Stick Around
Posts: 80

Re: Weird security problem with Suretap - seems to be sending international SMS messages

Hi @RogersMoin,

 

It's now been a month and a half.

 

My bill and usage activity continue to count the messages that suretap sends as 'international texts'.

 

(The 'My sent texts' under International are ALL automatic sent texts originated by Suretap.)

 

Please can you give me an update on when Rogers will be fixing this?

 

 

Screenshot 2015-07-25 21.28.33.png

thanks,


PHT

Retired Moderator RogersAsif
Retired Moderator
Posts: 700

Re: Weird security problem with Suretap - seems to be sending international SMS messages

Hi @hopetindall

 

The @CommunityHelps team has respond to your messages.

 

RogersAsif

Order Now!
Wilder vs. Ortiz II Live
LIVE: Saturday, November 23, 2019 8PM ET
Channels: 348 (HD) | 350 (SD) | Ignite TV 499
Price: $74.99 (HD) | $69.99 (SD) | Ignite TV $74.99
DTV can order on Nov. 21st & Ignite TV customers can order now!

Reigning heavyweight world champion Deontay "The Bronze Bomber'' Wilder takes on his most dangerous challenger as he defends his WBC title in a rematch against once-beaten Cuban slugger Luis "King Kong'' Ortiz.

Topic Stats
  • 8 replies
  • 3141 views
  • 1 Like
  • 3 in conversation