Skip to content

ct-report/IT

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

97 Commits
 
 
 
 
 
 
 
 
 
 

Repository files navigation

HOME Europe USA Rest of the World

IT

Contact Tracing - Italy

On April 16, 2020, the COVID-19 emergency commissioner has declared IMMUNI - developed by Bending Spoons - as the official app of the Italian Government.

On April 22, 2020, it has been announced that IMMUNI would no longer use a centralized model (PEPP-PT), but instead a decentralized one (DP^3T based) together with the new Apple+Google 'Exposure Notification' (BLE Contact Tracing) API. The release of such Apple+Google API to developers is scheduled for April 28.

On May 23, 2020, the first public release of source code for iOS/Android apps & CI Scheduler has been uploaded to Github.

On May 28, 2020 also the first public release of source code for backend (Common, OTP, Analytics, App Configuration, Exposure Ingestion & Reporting) has been uploaded to Github.

On June 1, 2020 first official release has been published on Google Play Store.

On January 29, 2021 first release on Huawei App Gallery, that supports both HMS Contact Shield API & Apple+Google Exposure Notifications API. It allows to run the official app also on the latest GMS uncertified devices by Honor/Huawei.

Since June 13, 2021 the app can be also used as a wallet to store EU Digital Green Certificates.


Shutdown Notice Starting December 31 2022, Immuni app won't be available for download from all official iOS/Android app-stores. Contact-tracing endpoints for keys/upload/analytics will be fully disabled & it will no longer be possible to download/update the app.


Play Store https://play.google.com/store/apps/details?id=it.ministerodellasalute.immuni
Sources & Documentation https://github.com/immuni-app
Website https://www.immuni.italia.it/
Huawei AppGallery https://appgallery.huawei.com/#/app/C103200367
Version Release Date
2.6.1 May 31, 2022 Universal APK - AppGallery ONLY
2.6.0 Mar 21, 2022
2.5.10 Feb 18, 2022
2.5.9 Feb 3, 2022
2.5.8 Jan 21, 2022
2.5.7 Jan 3, 2022
... ...
2.5.5 Nov 25, 2021
2.5.4 Sep 23, 2021
2.5.3 Aug 3, 2021
2.5.2 Jul 26, 2021
2.5.1 Jun 22, 2021
2.5.0 Jun 13, 2021
2.4.0 Apr 7, 2021
2.2.1 Jan 29, 2021
... ...
2.2.0 Dec 18, 2020
2.1.1 Nov 3, 2020
2.1.0 Oct 28, 2020
2.0.0 Oct 28, 2020
1.5.0 Sep 21, 2020
1.4.1 Sep 16, 2020
1.4.0 Sep 14, 2020
1.3.1 Aug 5, 2020
1.3.0 Jul 10, 2020
1.2.0 Jun 19, 2020
1.1.0 Jun 9, 2020
1.0.2 Jun 6, 2020
1.0.1 Jun 3, 2020
1.0.0 Jun 1, 2020
  • APKLAB Analysis
Build Link
2.6.1 #2610000 Huawei AppGallery https://apklab.io/apk.html?hash=f7e4789a1164039b8e56844d0c50ea998a2d192cdb6f2b8c0e8fc8bf923ed1cc
2.6.0 #2641892 Play Store https://apklab.io/apk.html?hash=52d03c594a6e598db5cd13fc8cccd7a917a822b23bb0d7a7451b41d73b3449ed
... ...
2.5.0 #2533973 Play Store https://apklab.io/apk.html?hash=c1da46a5d5aaf2851c18be3992436af42c0db9bc0f89aecc061c86a792f2cc73
2.4.0 #2430850 Play Store https://apklab.io/apk.html?hash=63ef3b54c3e5b3e61051583f813650f44493d5e7bab3fc10d5b2b71ad7a48def
2.2.1 #2325093 Play Store https://apklab.io/apk.html?hash=295d799863e8fb091788c3eaf0603ce7811d3e850185e9cd0bae56b5e95b8358
2.2.1 #2300001 Huawei AppGallery https://apklab.io/apk.html?hash=be7ade470d8f0197cd6e939045849918d5507860ac4476e40c1b0375cea4e3ef
... ...
1.2.0 #1203309 Play Store https://apklab.io/apk.html?hash=d4e6b3ec7ffdc623801f25a54985b49dea9d814d912336b0286d377b5e7bbc07
1.1.0 #1101922 Play Store https://apklab.io/apk.html?hash=b8029350c24286eee54740bd5a62b4c455937958ccc591681d1d8167c95fb646
1.0.2 #1021606 Play Store https://apklab.io/apk.html?hash=fe00b76fe1ea072fea925226ca09d5a859238ac9dbd004e127324f9fec5841e5
1.0.1 #1011346 Play Store https://apklab.io/apk.html?hash=873d3125965864e94dd4230dabe4c127aa8104d769607be8d0b6f3ccf7b647ca
1.0.0 #1000975 Play Store https://apklab.io/apk.html?hash=5e1c53dd55d28e91de78109e3cdac4797ba551c79f3608e8b517be243dd4535f
1.0.0 #1000975 Release https://apklab.io/apk.html?hash=8736a2c233e368b9b9c160f4b1c828329bff70d70bb1c3678aff0eaa11c555e7
1.0.0 #1000563 Release https://apklab.io/apk.html?hash=8f64b7fe497f94bc63cc1b3beeb5fe8ab7793b07e1c15aaceec11ff56c4c66a7
1.0.0 #1000000 Debug https://apklab.io/apk.html?hash=59ef69867e550205b227ae82d408ed18a95505af0ff5dd02173bbb6d29e4d983
1.0.0 #1000000 Release https://apklab.io/apk.html?hash=75c4bace9cffad60c6525bbd170b1430f090634720a9a01d133d3628b5a9c97d
  • JoeSandbox Report
Build Link
2.6.1 #2610000 Huawei AppGallery https://www.joesandbox.com/analysis/774409/0/html
2.6.0 #2641892 Play Store https://www.joesandbox.com/analysis/774435/0/html
... ...
2.5.0 #2533973 Play Store https://www.joesandbox.com/analysis/438512/0/html
2.4.0 #2430850 Play Store https://www.joesandbox.com/analysis/383358/0/html
2.2.1 #2325093 Play Store https://www.joesandbox.com/analysis/346027/0/html
2.2.1 #2300001 Huawei AppGallery https://www.joesandbox.com/analysis/346225/0/html
... ...
1.2.0 #1203309 Play Store https://www.joesandbox.com/analysis/239984/0/html
1.1.0 #1101922 Play Store https://www.joesandbox.com/analysis/236902/0/html
1.0.2 #1021606 Play Store https://www.joesandbox.com/analysis/236284/0/html
1.0.1 #1011346 Play Store https://www.joesandbox.com/analysis/235349/0/html
1.0.0 #1000975 Play Store https://www.joesandbox.com/analysis/234702/0/html
1.0.0 #1000975 Release https://www.joesandbox.com/analysis/234402/0/html
1.0.0 #1000563 Release https://www.joesandbox.com/analysis/233888/0/html
1.0.0 #1000000 Debug https://www.joesandbox.com/analysis/232698/0/html
1.0.0 #1000000 Release https://www.joesandbox.com/analysis/232703/0/html
  • Pithus Report
Build Link
2.6.1 #2610000 Huawei AppGallery https://beta.pithus.org/report/f7e4789a1164039b8e56844d0c50ea998a2d192cdb6f2b8c0e8fc8bf923ed1cc
2.6.0 #2641892 Google Play Store https://beta.pithus.org/report/52d03c594a6e598db5cd13fc8cccd7a917a822b23bb0d7a7451b41d73b3449ed
  • VirusTotal Details
Build Link
2.6.1 #2610000 Huawei AppGallery https://www.virustotal.com/gui/file/f7e4789a1164039b8e56844d0c50ea998a2d192cdb6f2b8c0e8fc8bf923ed1cc
2.6.0 #2641892 Google Play Store https://www.virustotal.com/gui/file/52d03c594a6e598db5cd13fc8cccd7a917a822b23bb0d7a7451b41d73b3449ed
... ...
1.0.0 #1000563 Release https://www.virustotal.com/gui/file/8f64b7fe497f94bc63cc1b3beeb5fe8ab7793b07e1c15aaceec11ff56c4c66a7/details
1.0.0 #1000000 Debug https://www.virustotal.com/gui/file/59ef69867e550205b227ae82d408ed18a95505af0ff5dd02173bbb6d29e4d983/details
1.0.0 #1000000 Release https://www.virustotal.com/gui/file/75c4bace9cffad60c6525bbd170b1430f090634720a9a01d133d3628b5a9c97d/details

\


Other Italian proposals

On April 1st, SM_COVID19 - developed by Softmining - has been published on Google Play Store (App changed name on April 12).

There is no explicit evidence about which institution has officially provided the required authorizations (according to COVID-19 app guidelines).

The former Italian Ministry for Digital Innovation - Paola Pisano - never replied to the requests for checks and clarifications.

Private checks have anyway identified the Campania Region as the institutional sponsor behind the authorization for the publication of such app on the Google Play Store.

It's a centralized solution. Every 60 seconds or 5 minutes (according to outdoors/indoors mode) it checks proximity/interactions with other peers (via Bluetooth/BLE) and retrieves the device location (Wi-Fi and GPS - if allowed by the user). Then it uploads such data to a Firebase instance.

However, according to recent checks, since June 2020 the app started to collect also the rolling proximity identifiers of GAEN contact tracing apps & uploaded ALL the BLE interactions with other devices.

Beta releases (before the submission to Play Store) had critical issues about data validation = database tampering with fake user & location data. Until now, production releases haven't been enabled to check past interactions with those users, that have been officially confirmed as infected by Health Authorities.

There are still issues with User ID generation (simple concatenation of Android Device ID until June 2020 & poorly hashed later) and unneeded permissions.

More than 50k downloads from Google Play Store (more than 100k according to the publisher).

Latest release update (5.1 - July 2020) has been reported to Google Play Developer Support because of malicious code detections.

Play Store https://play.google.com/store/apps/details?id=it.softmining.projects.covid19.savelifestyle
Sources Unreleased
Website https://www.smcovid19.org/
  • APKLAB Analysis
Build Link
5.1 #35 https://apklab.io/apk.html?hash=b5728080de8a6a1bdb8c3a2ff52ab88f81438415e0ea83b6c56c5b49bdec419e
5.0 #34 https://apklab.io/apk.html?hash=ca044e06b41e883a9eeb8e311fcc6f28c68d35c477cbd97d335a35d20dd3b046
4.5 #33 https://apklab.io/apk.html?hash=f1634d5ca7ac829b47d233c911afd52e024e7e95f8b33ffc3565adb3c92d8e78
4.4 #32 https://apklab.io/apk.html?hash=5aa062cafe78ff07f5537475816b9e2d4d516bbf855d86d12c155eba027f6be3
4.3 #31 https://apklab.io/apk.html?hash=9fc80059939cc7ea693ca4e395da55113013facc11f82e157f0ed95a2142b26a
4.2 #30 https://apklab.io/apk.html?hash=1e52a2428e485fb0ff2f461bb053e5dbce1f526c64b70c5a5cbcbebeab88fd8a
4.1 #28 https://apklab.io/apk.html?hash=d2b5546d27bdbbe044063997cfe3292fdafafea4a55eeeadd77e6c236b429873
4.0 #27 https://apklab.io/apk.html?hash=5225d7722a401aa9d89da99b8cd342d087c6b4ab40a0d1b15fe5b74a84aecee1
3.9b #26 https://apklab.io/apk.html?hash=6f46eef9c0c63436323aff9f031e5b462756d544192e44b0d734450e066f0b06
3.9 #25 https://apklab.io/apk.html?hash=5bcbab60139be51484a46b888a51b19a9eaa278338b8adcaac512dfb804a3923
3.8 #24 https://apklab.io/apk.html?hash=bf815c40391c3a615130a2579b86e22ee3f903dad371dd7cc36a3ba8d02575f4
3.6 #22 https://apklab.io/apk.html?hash=5b012eb6e0cef92ffce352a84edbe4a9833d1dd6a507554efc2030bd34b7fc11
3.5 #21 https://apklab.io/apk.html?hash=cc930ca16d75cb3b2a66fe7fc69a2fc66e05f37cae5ab39694096f0eb317131e
3.4 #20 https://apklab.io/apk.html?hash=b060d73007a3b2969f9a6a848b1e4bc77a4d566663344dd594eaeb2f6142c4d6
3.3 #19 https://apklab.io/apk.html?hash=74610ea4d89d1a01ccfcc64adb65245526c36fbbec5a5b569ece21cb230f3cf2
3.2 #18 https://apklab.io/apk.html?hash=1db0fa65cba95b9e5570e8ff12bdd3db94f11271ca3293b4f166ac36921241c7
3.1 #16 https://apklab.io/apk.html?hash=a82f5c9abea3214adc93ee811c43fd31355982fc824ffc4d813072ece5ab6250
2.6 #14 https://apklab.io/apk.html?hash=98a4500cbe144b74640394005c3781c4633c1dbbd235e64b7363e7008a941ebf
2.5 #13 https://apklab.io/apk.html?hash=e7d9d846e3579d467ece5c2dc50a6f54a19d223caf131a6ab4f2bd28a0dad63c
2.4 #12 https://apklab.io/apk.html?hash=96f8f365f0e259d8ec3fb1c959359a85c5ecec576ef2fd1bf9e3813a2a59a4fd
  • JoeSandbox Report
Build Link
5.1 #35 https://www.joesandbox.com/analysis/432085/0/html
[...]
3.9 #25 https://www.joesandbox.com/analysis/236289/0/html
3.8 #24 https://www.joesandbox.com/analysis/235357/0/html
3.6 #22 https://www.joesandbox.com/analysis/229829/0/html
3.5 #21 https://www.joesandbox.com/analysis/228751/0/html
3.4 #20 https://www.joesandbox.com/analysis/227111/0/html
3.3 #19 https://www.joesandbox.com/analysis/226714/0/html
3.2 #18 https://www.joesandbox.com/analysis/226247/0/html
3.1 #16 https://www.joesandbox.com/analysis/225349/0/html
2.6 #14 https://www.joesandbox.com/analysis/223624/0/html
2.5 #13 https://www.joesandbox.com/analysis/223468/0/html
2.4 #12 https://www.joesandbox.com/analysis/223210/0/html
  • Additional Malicious Code detections for release 5.1 #35
Website Link
VirusTotal https://www.virustotal.com/gui/file/b5728080de8a6a1bdb8c3a2ff52ab88f81438415e0ea83b6c56c5b49bdec419e/detection
Pithus https://beta.pithus.org/report/b5728080de8a6a1bdb8c3a2ff52ab88f81438415e0ea83b6c56c5b49bdec419e
Triage https://tria.ge/210609-5k9g3dm5j6

  • Other Proposed Regional/National solutions

STOP CORONAVIRUS FVG developed by Accenture & tested by Insiel for Italian region Friuli Venezia Giulia

Sources References
Unreleased Based on STOPP CORONA AT https://github.com/ct-report/AT


COVID COMMUNITY ALERT - one of the 2 proposals in the final shortlist for the official Government app.

Sources References
https://gitlab.com/coronavirus-outbreak-control Based on TCN Protocol https://github.com/ct-report/TCN