{"package_name":"com.wsomacp","label":"Configuration message","device_count":44,"observation_count":67,"user_facing_count":0,"first_seen":"2025-05-05T17:48:10Z","last_seen":"2026-09-18T01:54:07Z","guidance":{"summary":"Labelled \"Configuration message\" on every device in this sample, this is the Samsung component that receives and applies OMA CP messages. OMA CP is Open Mobile Alliance Client Provisioning, an industry standard for deploying network settings to mobile devices over the air; Check Point's research write up dates the standard to 2001 with its latest specification in 2009, and describes the messages as arriving over WAP Push, a binary SMS delivered to port 2948. The same write up sets out what such a message can change: MMS servers, proxy addresses, browser homepage and bookmarks, mail servers and directory servers for contact and calendar synchronisation. It has no launcher entry in any observation here, so nothing a user opens; it acts on messages the network sends.\n\nThe permissions it declares, as recorded on this site, line up with that description rather than adding to it: RECEIVE_WAP_PUSH and BROADCAST_WAP_PUSH, RECEIVE_SMS, WRITE_APN_SETTINGS, and Samsung-defined permissions for the browser homepage and bookmarks and for the Samsung email provider. It is signed by a Samsung OEM key that also signs the Android framework.\n\nIts security history is the reason it is worth knowing about. Check Point reported in 2019 that Samsung devices accepted unauthenticated OMA CP messages, so an attacker who could send one needed only the user's acceptance to point the device at a proxy of their choosing. Samsung's own security bulletin records the fix as SVE-2019-14073, \"Potential Phishing Flow in OMACP\", in the Security Maintenance Release for May 2019, described there as a vulnerability allowing a manipulated OMACP message to change the network and internet settings on the device. So Samsung reported the issue fixed in May 2019; nothing here establishes that every device in the field received that release, and older or unpatched builds may remain affected. Either way, the point that carries forward is that this package is the component through which operator-pushed network configuration reaches the device.\n\nVersion note: Samsung's own Common Criteria application lists record the same package under the same label on the Galaxy Note9 (the Oreo-era N960N list, at 7.1.13) and the Galaxy S20 (the R-era G981U list, at 7.4.07). Devices on this site report versions 7.5.02 to 9.2.08, observed from API 28 through API 37 and targeting API 30 to 36, and only on Samsung hardware. It is therefore long-standing and still maintained. Beyond the 2019 authentication fix, no source establishes a change in its role across Android releases, and none is implied by the data here.\n\nFor Android Enterprise, EMM and kiosk use, the relevance is that this is the on-device path by which APN and proxy settings can be altered from outside the management channel, which is usually the configuration an administrator has deliberately fixed. The documented controls sit in policy rather than in the package: the Android Management API exposes mobileNetworksConfigDisabled, \"Whether configuring mobile networks is disabled\", and smsDisabled, \"Whether sending and receiving SMS messages is disabled\". Where the package itself needs to go, Samsung documents blocking a named preinstalled system app through Knox Manage's application policies rather than stripping it. The rating below is caution rather than safe because on a device that still depends on the operator to push its APN or MMS settings, removing the component that applies them can leave data or messaging misconfigured; on a fixed-configuration kiosk where the EMM supplies the APN, there is much less to lose. Test on one device before applying it to a fleet.","safe_to_disable":"caution","sources":[{"title":"Advanced SMS Phishing Attacks Against Modern Android-based Smartphones - Check Point Research","url":"https://research.checkpoint.com/2019/advanced-sms-phishing-attacks-against-modern-android-based-smartphones/"},{"title":"Samsung Security Maintenance Release, May 2019 (SVE-2019-14073, Potential Phishing Flow in OMACP)","url":"https://security.samsungmobile.com/securityUpdate.smsb?year=2019\u0026month=5"},{"title":"Galaxy Note9 (N960N) application list - Samsung Knox CC Mode documentation","url":"https://docs.samsungknox.com/CCMode/N960N_O.pdf"},{"title":"Galaxy S20 5G (G981U) application list - Samsung Knox CC Mode documentation","url":"https://docs.samsungknox.com/CCMode/G981U_R.pdf"},{"title":"Policy resource reference (mobileNetworksConfigDisabled, smsDisabled) - Android Management API","url":"https://developers.google.com/android/management/reference/rest/v1/enterprises.policies"},{"title":"Enable or disable a specific system app - Knox Manage - Samsung Knox Documentation","url":"https://docs.samsungknox.com/admin/knox-manage/kbas/kba-744-enable-or-disable-specific-system-app/"},{"title":"Package provenance for com.wsomacp - Android System App Database","url":"https://sysapps.bayton.org/api/packages/com.wsomacp"}],"last_verified":"2026-08-16T00:00:00Z"},"labels":[{"label":"Configuration message","locale":"en-gb","count":24},{"label":"Configuration message","locale":"en","count":18},{"label":"Configuration message","locale":"en-us","count":17},{"label":"Configuratiebericht","locale":"nl-nl","count":5},{"label":"Messaggio di configurazione","locale":"it-IT","count":5},{"label":"Configuration message","locale":"en-nl","count":3},{"label":"Konfigurationsnachricht","locale":"de-de","count":3},{"label":"Configuration message","locale":"en-GB","count":2},{"label":"Configuration message","locale":"","count":2},{"label":"Mensaje de configuración","locale":"es-ES","count":2},{"label":"Mensaje de configuración","locale":"es-es","count":2},{"label":"Mensaje de configuración","locale":"es-us","count":2},{"label":"Message de configuration","locale":"fr-fr","count":2},{"label":"Messaggio di configurazione","locale":"it-it","count":2},{"label":"Configuration message","locale":"en-au","count":1},{"label":"Configuration message","locale":"en-US","count":1},{"label":"Konfigurační zpráva","locale":"cs-cz","count":1},{"label":"Konfigurační zpráva","locale":"cs-CZ","count":1},{"label":"Mensaje de configuración","locale":"es-US","count":1},{"label":"Message de configuration","locale":"fr-FR","count":1},{"label":"Message de configuration","locale":"fr-dz","count":1},{"label":"Wiadomość konfiguracyjna","locale":"pl-PL","count":1},{"label":"Wiadomość konfiguracyjna","locale":"pl-pl","count":1},{"label":"Сообщение конфигурации","locale":"ru-ru","count":1}],"seen_on":[{"device_id":4974,"make":"samsung","model":"SM-A057G","os_api":"35","observation_count":1,"user_facing_count":0,"last_seen":"2026-08-08T09:19:44Z","provenance":{"classification":"oem","vendor":"Samsung","sha256":"34df0e7a9f1cf1892e45c056b4973cd81ccf148a4050d11aea4ac5a65f900a42"}},{"device_id":293,"make":"samsung","model":"SM-A125F","os_api":"31","observation_count":1,"user_facing_count":0,"last_seen":"2026-01-21T16:36:23Z","provenance":{"classification":"oem","vendor":"Samsung","sha256":"0a012131b1bdf9e80ef97d37f3b48362be363a464c8445ecf83627ebe8493a1e"}},{"device_id":45,"make":"samsung","model":"SM-A135F","os_api":"34","observation_count":3,"user_facing_count":0,"last_seen":"2026-01-21T21:26:08Z","provenance":{"classification":"oem","vendor":"Samsung","sha256":"34df0e7a9f1cf1892e45c056b4973cd81ccf148a4050d11aea4ac5a65f900a42"}},{"device_id":292,"make":"samsung","model":"SM-A137F","os_api":"34","observation_count":1,"user_facing_count":0,"last_seen":"2026-01-17T15:40:39Z"},{"device_id":101,"make":"samsung","model":"SM-A236B","os_api":"34","observation_count":2,"user_facing_count":0,"last_seen":"2026-04-10T09:18:27Z","provenance":{"classification":"oem","vendor":"Samsung","sha256":"34df0e7a9f1cf1892e45c056b4973cd81ccf148a4050d11aea4ac5a65f900a42"}},{"device_id":130,"make":"samsung","model":"SM-A266B","os_api":"35","observation_count":2,"user_facing_count":0,"last_seen":"2025-08-21T17:33:39Z"},{"device_id":297,"make":"samsung","model":"SM-A266B","os_api":"36","observation_count":1,"user_facing_count":0,"last_seen":"2026-01-26T12:37:53Z"},{"device_id":3914,"make":"samsung","model":"SM-A346B","os_api":"35","observation_count":1,"user_facing_count":0,"last_seen":"2026-07-27T19:03:49Z","provenance":{"classification":"oem","vendor":"Samsung","sha256":"34df0e7a9f1cf1892e45c056b4973cd81ccf148a4050d11aea4ac5a65f900a42"}},{"device_id":75,"make":"samsung","model":"SM-A515F","os_api":"33","observation_count":1,"user_facing_count":0,"last_seen":"2025-06-30T11:33:16Z"},{"device_id":58,"make":"samsung","model":"SM-A528B","os_api":"33","observation_count":1,"user_facing_count":0,"last_seen":"2025-06-19T10:15:41Z"},{"device_id":57,"make":"samsung","model":"SM-A536B","os_api":"35","observation_count":1,"user_facing_count":0,"last_seen":"2025-06-19T09:46:41Z"},{"device_id":4345,"make":"samsung","model":"SM-A536B","os_api":"36","observation_count":1,"user_facing_count":0,"last_seen":"2026-07-29T10:09:51Z","provenance":{"classification":"oem","vendor":"Samsung","sha256":"34df0e7a9f1cf1892e45c056b4973cd81ccf148a4050d11aea4ac5a65f900a42"}},{"device_id":76,"make":"samsung","model":"SM-A556B","os_api":"35","observation_count":1,"user_facing_count":0,"last_seen":"2025-07-01T07:26:00Z"},{"device_id":197,"make":"samsung","model":"SM-A566B","os_api":"36","observation_count":3,"user_facing_count":0,"last_seen":"2026-09-12T23:27:15Z","provenance":{"classification":"oem","vendor":"Samsung","sha256":"34df0e7a9f1cf1892e45c056b4973cd81ccf148a4050d11aea4ac5a65f900a42"}},{"device_id":94,"make":"samsung","model":"SM-F721B","os_api":"35","observation_count":1,"user_facing_count":0,"last_seen":"2025-07-09T14:36:33Z"},{"device_id":220,"make":"samsung","model":"SM-F766B","os_api":"36","observation_count":1,"user_facing_count":0,"last_seen":"2025-11-11T17:28:28Z"},{"device_id":7287,"make":"samsung","model":"SM-F971B","os_api":"37","observation_count":1,"user_facing_count":0,"last_seen":"2026-09-18T01:54:07Z","provenance":{"classification":"oem","vendor":"Samsung","sha256":"34df0e7a9f1cf1892e45c056b4973cd81ccf148a4050d11aea4ac5a65f900a42"}},{"device_id":205,"make":"samsung","model":"SM-G766B","os_api":"35","observation_count":1,"user_facing_count":0,"last_seen":"2025-10-17T16:37:16Z"},{"device_id":266,"make":"samsung","model":"SM-G766B","os_api":"36","observation_count":1,"user_facing_count":0,"last_seen":"2026-09-05T16:15:15Z","provenance":{"classification":"oem","vendor":"Samsung","sha256":"34df0e7a9f1cf1892e45c056b4973cd81ccf148a4050d11aea4ac5a65f900a42"}},{"device_id":280,"make":"samsung","model":"SM-G780F","os_api":"33","observation_count":1,"user_facing_count":0,"last_seen":"2025-12-29T12:36:43Z","provenance":{"classification":"oem","vendor":"Samsung","sha256":"34df0e7a9f1cf1892e45c056b4973cd81ccf148a4050d11aea4ac5a65f900a42"}},{"device_id":241,"make":"samsung","model":"SM-G973U","os_api":"31","observation_count":2,"user_facing_count":0,"last_seen":"2026-06-10T15:06:05Z","provenance":{"classification":"oem","vendor":"Samsung","sha256":"34df0e7a9f1cf1892e45c056b4973cd81ccf148a4050d11aea4ac5a65f900a42"}},{"device_id":298,"make":"samsung","model":"SM-G991B","os_api":"35","observation_count":1,"user_facing_count":0,"last_seen":"2026-04-19T09:09:11Z","provenance":{"classification":"oem","vendor":"Samsung","sha256":"34df0e7a9f1cf1892e45c056b4973cd81ccf148a4050d11aea4ac5a65f900a42"}},{"device_id":300,"make":"samsung","model":"SM-M315F","os_api":"31","observation_count":1,"user_facing_count":0,"last_seen":"2026-02-02T16:03:40Z"},{"device_id":145,"make":"samsung","model":"SM-N950U1","os_api":"28","observation_count":1,"user_facing_count":0,"last_seen":"2025-08-20T13:37:10Z"},{"device_id":11,"make":"samsung","model":"SM-N986B","os_api":"33","observation_count":9,"user_facing_count":0,"last_seen":"2025-07-17T00:14:13Z"},{"device_id":120,"make":"samsung","model":"SM-S721U","os_api":"35","observation_count":5,"user_facing_count":0,"last_seen":"2025-08-05T02:05:06Z"},{"device_id":5178,"make":"samsung","model":"SM-S731B","os_api":"36","observation_count":1,"user_facing_count":0,"last_seen":"2026-08-11T18:01:56Z","provenance":{"classification":"oem","vendor":"Samsung","sha256":"34df0e7a9f1cf1892e45c056b4973cd81ccf148a4050d11aea4ac5a65f900a42"}},{"device_id":34,"make":"samsung","model":"SM-S906B","os_api":"35","observation_count":1,"user_facing_count":0,"last_seen":"2025-06-02T16:53:54Z"},{"device_id":99,"make":"samsung","model":"SM-S921B","os_api":"35","observation_count":2,"user_facing_count":0,"last_seen":"2025-07-22T13:41:51Z","provenance":{"classification":"oem","vendor":"Samsung","sha256":"34df0e7a9f1cf1892e45c056b4973cd81ccf148a4050d11aea4ac5a65f900a42"}},{"device_id":347,"make":"samsung","model":"SM-S921B","os_api":"36","observation_count":1,"user_facing_count":0,"last_seen":"2026-09-17T22:25:10Z","provenance":{"classification":"oem","vendor":"Samsung","sha256":"34df0e7a9f1cf1892e45c056b4973cd81ccf148a4050d11aea4ac5a65f900a42"}},{"device_id":59,"make":"samsung","model":"SM-S921U","os_api":"35","observation_count":1,"user_facing_count":0,"last_seen":"2025-06-19T18:23:52Z"},{"device_id":339,"make":"samsung","model":"SM-S926B","os_api":"36","observation_count":1,"user_facing_count":0,"last_seen":"2026-04-14T05:11:37Z","provenance":{"classification":"oem","vendor":"Samsung","sha256":"34df0e7a9f1cf1892e45c056b4973cd81ccf148a4050d11aea4ac5a65f900a42"}},{"device_id":295,"make":"samsung","model":"SM-S928B","os_api":"36","observation_count":2,"user_facing_count":0,"last_seen":"2026-06-12T13:09:24Z","provenance":{"classification":"oem","vendor":"Samsung","sha256":"34df0e7a9f1cf1892e45c056b4973cd81ccf148a4050d11aea4ac5a65f900a42"}},{"device_id":177,"make":"samsung","model":"SM-S928U1","os_api":"35","observation_count":1,"user_facing_count":0,"last_seen":"2025-09-12T23:04:16Z"},{"device_id":189,"make":"samsung","model":"SM-S931B","os_api":"35","observation_count":1,"user_facing_count":0,"last_seen":"2025-09-20T01:00:10Z"},{"device_id":228,"make":"samsung","model":"SM-S931B","os_api":"36","observation_count":1,"user_facing_count":0,"last_seen":"2025-11-23T23:24:14Z"},{"device_id":271,"make":"samsung","model":"SM-S936B","os_api":"36","observation_count":1,"user_facing_count":0,"last_seen":"2025-12-18T15:12:58Z"},{"device_id":153,"make":"samsung","model":"SM-S937B","os_api":"35","observation_count":1,"user_facing_count":0,"last_seen":"2025-08-25T10:38:30Z"},{"device_id":104,"make":"samsung","model":"SM-S938B","os_api":"35","observation_count":2,"user_facing_count":0,"last_seen":"2025-08-25T19:09:54Z"},{"device_id":353,"make":"samsung","model":"SM-S942B","os_api":"37","observation_count":1,"user_facing_count":0,"last_seen":"2026-05-25T09:51:12Z","provenance":{"classification":"oem","vendor":"Samsung","sha256":"34df0e7a9f1cf1892e45c056b4973cd81ccf148a4050d11aea4ac5a65f900a42"}},{"device_id":6978,"make":"samsung","model":"SM-S948U","os_api":"36","observation_count":1,"user_facing_count":0,"last_seen":"2026-09-09T03:01:22Z"},{"device_id":186,"make":"samsung","model":"SM-T636B","os_api":"35","observation_count":2,"user_facing_count":0,"last_seen":"2025-10-12T11:07:44Z"},{"device_id":109,"make":"samsung","model":"SM-T976B","os_api":"33","observation_count":1,"user_facing_count":0,"last_seen":"2025-07-21T09:13:24Z"},{"device_id":69,"make":"samsung","model":"SM-X716B","os_api":"35","observation_count":1,"user_facing_count":0,"last_seen":"2025-06-27T04:07:47Z"}],"intelligence":{"device_profiles":22,"signer_count":2,"signer_consistent":false,"max_permission_count":19,"min_size_bytes":582034,"max_size_bytes":1143378,"min_target_sdk":30,"max_target_sdk":36,"oldest_version":"7.5.02","newest_version":"10.0.01","has_third_party_preinstall":false,"genuine_third_party":false,"play_eligible_count":0,"signers":[{"sha256":"34df0e7a9f1cf1892e45c056b4973cd81ccf148a4050d11aea4ac5a65f900a42","classification":"oem","vendor":"Samsung","observation_count":31,"makes":["samsung"],"signs_framework":true,"global_make_count":1,"global_package_count":508,"global_observation_count":10196},{"sha256":"0a012131b1bdf9e80ef97d37f3b48362be363a464c8445ecf83627ebe8493a1e","classification":"oem","vendor":"Samsung","observation_count":1,"makes":["samsung"],"signs_framework":true,"global_make_count":1,"global_package_count":224,"global_observation_count":224}],"permissions":[{"permission":"android.permission.ACCESS_NETWORK_STATE","description":"Allows the app to view information about network connections such as which networks exist and are connected.","official":true},{"permission":"android.permission.BROADCAST_WAP_PUSH","description":"Signature-level system permission, for platform-signed apps.","official":false},{"permission":"android.permission.POST_NOTIFICATIONS","description":"Allows the app to show notifications","official":true},{"permission":"android.permission.READ_PHONE_STATE","description":"Allows the app to access the phone features of the device. This permission allows the app to determine the phone number and device IDs, whether a call is active, and the remote number connected by a call.","official":true},{"permission":"android.permission.READ_PRIVILEGED_PHONE_STATE","description":"Signature or privileged system permission.","official":false,"doc":{"title":"User Data Identifiers","url":"https://developer.android.com/identity/user-data-ids"}},{"permission":"android.permission.REAL_GET_TASKS","description":"Signature or privileged system permission.","official":false},{"permission":"android.permission.RECEIVE_SMS","description":"Allows the app to receive and process SMS messages. This means the app could monitor or delete messages sent to your device without showing them to you.","official":true},{"permission":"android.permission.RECEIVE_WAP_PUSH","description":"Allows the app to receive and process WAP messages. This permission includes the ability to monitor or delete messages sent to you without showing them to you.","official":true},{"permission":"android.permission.USE_FULL_SCREEN_INTENT","description":"Allows the app to display notifications as full screen activities on a locked device","official":true},{"permission":"android.permission.VIBRATE","description":"Allows the app to control the vibrator.","official":true},{"permission":"android.permission.WAKE_LOCK","description":"Allows the app to prevent the phone from going to sleep.","official":true},{"permission":"android.permission.WRITE_APN_SETTINGS","description":"Signature or privileged system permission.","official":false,"doc":{"title":"Behavior changes: Apps targeting Android 11","url":"https://developer.android.com/about/versions/11/behavior-changes-11"}},{"permission":"com.samsung.android.email.permission.ACCESS_PROVIDER","official":false},{"permission":"com.sec.android.app.browser.permission.Bookmark","official":false},{"permission":"com.sec.android.app.browser.permission.HOMEPAGE","official":false},{"permission":"com.sec.android.fotaclient.permission.FOTA","official":false},{"permission":"com.sec.epdg.PERMISSION","official":false},{"permission":"com.sec.imsservice.PERMISSION","official":false},{"permission":"com.sec.imsservice.permission.EPDG_NAME","official":false}]}}