MuMu Player Pro (NetEase) silently runs 17 system reconnaissance commands every 30 minutes on macOS - news.md

Hacker News is a community-driven platform for sharing and discussing technology news, startups, and programming-related topics. Through user submissions and comments, Hacker News offers insights into emerging technology trends, industry developments, and entrepreneurial ventures. Readers can participate in discussions, share their insights, and stay informed about the latest advancements in technology and innovation.

Hacker News

MuMu Player Pro for macOS (v1.8.5) by NetEase silently executes 17 system reconnaissance commands every 30 minutes while running. These commands collect extensive data including all running processes with full arguments (ps aux), local network device enumeration (arp -a), the /etc/hosts file, kernel parameters (sysctl -a), installed applications inventory, DNS/proxy configuration, mounted filesystems, and system launch agents/daemons. Each collection generates ~400KB of data and is tied to the Mac's hardware serial number via SensorsData analytics. None of this is disclosed in MuMu's privacy policy, and none of it is necessary for Android emulator functionality. Users can verify by checking timestamped directories in ~/Library/Application Support/com.netease.mumu.nemux-global/logs/.