• After 15+ years, we've made a big change: Android Forums is now Early Bird Club. Learn more here.

Help Android2.3.3

J

jeffsbenhacked

Newbie
Some hacker has gained access to my G'zOne Commando.They are able to sync their laptop with my cell.they have taken over admin privileges and locked me out of many settings .Help
 
Disconnect the phone from the network (turn off both mobile data and WiFi). That will stop them doing anything else with it.

Log on to Google via a computer and change your GMail password. If you've not already set up 2 factor authentication, now would be a very good time to do so. The simplest way for a hacker to get access to your phone is via your GMail account, so you must assume that this was hacked - 2 factor authentication will make it harder for them to get access again, but obviously it would be better if we knew how this was done in the first place. I'd recommend running a thorough malware scan on your computer too, but change the GMail login first (if paranoid, change GMail, scan your PC, then change it again if the scan finds anything).

Now, you say they've taken over admin privileges on the phone: do you mean that you had admin privileges to start with (i.e. the phone was rooted), or just that you no longer have access to some settings? And is there any sign that it is rooted now? Did you load any apps from dodgy sites (certainly anywhere offering paid apps for free, but potentially any download site apart from the main app stores, or anything downloaded while web browsing)? That's the other way in apart from your GMail account, to trick you into installing something that contains malware.

So, the next thing to do is to factory reset your phone. Hopefully you have backups of anything that's important, but since we don't know what may have been installed on your phone wiping it is the safest thing. The only catch is that if the phone was rooted something could have been installed to the system partition (i.e. the ROM) in which case it would survive a reset. So once you've rebooted and input your new password it's probably worth installing a root checker app and a malware scanner from the Play Store and checking your phone, without installing anything else. If you were rooted, reinstall your ROM - that should erase anything that had been added to the system partition.

If the reset option in the system menu is one of the things you are locked out of, reboot the phone into recovery mode and do it from there (generally involves shutting down then restarting while pressing some combination of buttons - I don't know what combination for this phone, but power and volume keys are usually involved).

Finally, you say "they can sync their laptop with my cell" - how do you know this? Seems odd for a hacker to advertise that you've been hacked.
 
Tried hard reset nothing changer .tried to access settings for passwords ,tried to encrypt files .It days disabled by remote admin.they have defeated,changed pass words ,and made them self admin on all gmail accounts. I DON'T OWN A PC.
 
So you are locked out of your GMail account? If you use a browser to go to gmail.com and log in there can you change your password? Of course if you are doing that from a device that is hacked there is a risk (e.g. if they have installed a keylogger), so it would be better to do it from another device - a computer in a public library or someone else's phone for example. If they have changed the GMail password already so that you can't change that the best bet would be to inform Google that the account has been hacked.

That certainly sounds like your GMail account has been hacked if you are seeing other devices accessing it. If they have access to that account then you won't achieve anything by resetting the phone as long as they still have access to the account - and you should make sure you don't automatically restore stuff when you log back in after a reset.
 
Tried disabling automatic restore.but it still restores they can turn on my Bluetooth and WiFi.Is it possible to create a connection using push to talk .on a 801. Radio frequency
 
Tried ##7764726 it opened but under nam it has no name,says my nam is 0000001307 and the akey field is blank .so some how they have changed those settings.The secure certificates have all been replaced with bogus ones like *google and I am getting redirected to different sites.Cant manage applications settings system or ones Ive downloaded from play google
 
I have no idea what you mean by an 801 radio frequency, and "push to talk" was a technology we never had over here. But I doubt you could manage an internet connection through it, and it's an internet connection that's your main weakness (unless someone has installed something similar to some anti-theft products which allow you to turn data on remotely via a binary SMS - in that case you'll need to put it into airplane mode to stop it).

Getting the GMail account out of their hands is the top priority. If you can't reset that via a browser on your phone you need to borrow another internet connection for a few minutes to change that. A quick web search pulled up this page of suggestions for what to do if your account is hacked, but obviously it would be better to follow such things from a device which isn't already compromised like your phone is.
 
Hadron said:
I have no idea what you mean by an 801 radio frequency, and "push to talk" was a technology we never had over here. But I doubt you could manage an internet connection through it, and it's an internet connection that's your main weakness (unless someone has installed something similar to some anti-theft products which allow you to turn data on remotely via a binary SMS - in that case you'll need to put it into airplane mode to stop it).

Getting the GMail account out of their hands is the top priority. If you can't reset that via a browser on your phone you need to borrow another internet connection for a few minutes to change that. A quick web search pulled up this page of suggestions for what to do if your account is hacked, but obviously it would be better to follow such things from a device which isn't already compromised like your phone is.
Click to expand...
 
It's possible that some tool has been installed which is analogous to that in some of its functions. If someone can get hold of your Google login they can remotely install anything in the Play Store to your phone. This is why I say it's safest to wipe the phone completely, but also that you need to get control of the Play account before doing this - or just not reconnect the phone to your Google account, if it will let you skip the Google login part of the initial setup after a factory reset (some models do, some don't). Actually if it will let you do that that should insulate you, unless they have installed something using root privileges.
 
I believe they have root acc
..Is there any way for me to access root .I have 6 PC's some that went even connected to internet destroyed and 8 to 10 cell phones .Including Apple I-5. This has Benn going on for couple of years .I have reported it to the police,Google ,Facebook and anyone else who cares to listen.There has got to be an anewer somewhere It,s pretty intelligent.
 
Normally when a phone is rooted any app that requires root access can request it, then a gatekeeper app called superuser or SuperSU will ask you, as the user, whether you want to allow the app to use root privileges. So it's not like the linux command line, where you would use the "su" command to enable superuser privileges or preface a command with "sudo" to show that you want it to be run as root.

However, you could rig it so that it allows apps which require root access to have it without asking for confirmation (we've occasionally met cheap Chinese devices which were set up like that out of the box). So if someone knows that they are doing they could set it up so that they could use root-enabled apps without the user having to authorise this. If you have superuser or supersu installed then it's been rooted, as there's no other reason to have those. If you have working play store access you could download a root checker app and see whether there is any superuser access present.

But if you've had a history of your devices being hacked then one has to ask what is the common factor (how are all of them accessed) and why? It's not as if someone is subtly trying to steal your data without you knowing, this is more like deliberate harassment.

I'm going to have to go offline now, but I'll ask the mods whether anyone with some security knowledge can advise.
 
From a secure (unaffected) device:

1. Go to www.google.com
2. Click "Sign-in"then "Need help?"
3. Follow the instructions, being sure to specify an alternate NON-GMAIL address to receive the reset email.
4, Complete the Google password reset.
5. Factory-reset the device(s) and sign into Google using the new reset password, ensuring that you DON'T enable "automatically restore" during initial setup.
 
No problems solved. Can my phone be cloned? Maybe getting access try an VPN ? Come some one out there can help me figure this out .This hacker cant outsmart all of you .
 
You must log in or register to reply here.
Back
Top Bottom