Budget Samsung phones shipped with unremovable spyware, say researchers

Budget Samsung phones are alleged to come with unremovable spyware, after a new post accused AppCloud of hidden data gathering on Galaxy A and M series devices. According to SMEX, the software collects biometric data and IP addresses and is deeply integrated into the operating system, requiring root access to remove and voiding the warranty if attempted.

Samsung has partnered with ironSource since 2022, carrying the Aura toolkit for telecoms and device makers in more than 30 markets, with the expansion in November 2022 happening in the same month Unity Technologies completed its $4.4bn acquisition of ironSource. SMEX’s analysis points to software called Install Core, which is marketed as an advertising platform but can install other products without user permission.

The Post notes that AppCloud isn’t listed on the Unity/Ironsource websites this February, nor appears on the phone’s home screen, and it runs in the background with no privacy policy or consent screen, though users can disable it in the application list, even if it tends to reappear after system updates. Posted 20 November 2025.