An official statement from BLU Products says the company has identified and has quickly removed a recent security issue caused by a 3rd party app on six BLU mobile devices. The app had been collecting unauthorized personal data such as text messages, call logs, and contacts.
The affected devices include:
2.Energy X Plus 2
4.Advance 4.0 L2
The affected application has since been self-updated and the functionality verified to be no longer collecting or sending this information.
Check Your BLU Device
If you own one of the listed smartphone, check:
Settings->Apps->Settings iconin top right corner ->Show System->Wireless Update. If your Wireless Update version is v 126.96.36.199.004 or higher, your BLU device has received the security fix update and is fine.