Hacked?

kahley · Nov 30, 2019

My bluetooth has been connecting w/o authorization for some weeks. This evening, I screenshot this log from mirrorlink. Bluetooth is indicating mirrorlink activated BT today. I do not use samsung mirrorlink certainly not with a vehicle.

--------- beginning of main
11-29 20:21:51.466 7161 7161 D VPNC : LogActivity: onSaveInstanceState
11-29 20:24:20.462 7161 7161 D VPNC : LogActivity: onSaveInstanceState
11-29 20:24:36.131 7161 7161 D VPNC : LogActivity: onSaveInstanceState
11-29 20:24:38.117 7161 7161 D VPNC : MainActivity: onResume
11-29 20:24:38.117 7161 7161 D VPNC : MainActivity: active conn: null
11-29 20:24:38.117 7161 7161 D VPNC : ProfileClient: checkUpgrade
11-29 20:24:38.154 7161 7161 D VPNC : MainActivity: updateProfileList
11-29 20:24:38.155 7161 7161 I VPNC : MainActivity: GOT 0 profiles
11-29 20:24:38.158 7161 7161 D VPNC : MainActivity: recreateDialogs
11-29 20:24:38.158 7161 7161 D VPNC : WorkerService: enableShutdown: true
11-29 20:24:41.273 7161 7161 D VPNC : MainActivity: onPause
11-29 20:24:42.501 7161 7161 D VPNC : MainActivity: onDestroy
11-29 20:24:42.501 7161 7161 D VPNC : WorkerClient: doUnbindService
11-29 20:24:42.541 7161 7161 D VPNC : WorkerService: onUnbind
11-29 20:24:42.541 7161 7161 D VPNC : WorkerService: checkServiceStopSoon
11-29 20:24:47.551 7161 7161 D VPNC : WorkerService: stopIfNoActiveConnections
11-29 20:24:47.551 7161 7161 I VPNC : WorkerService: stopping service!
11-29 20:24:47.551 7161 7161 D VPNC : WorkerService: clearConnectionNotification
11-29 20:24:47.559 7161 7161 D IPSC : IPsecRemoteConnection: setServiceListener(null)
11-29 20:24:47.559 7161 7161 D IPSC : IPsecRemoteConnection: stopService()
11-29 20:24:47.568 7161 7161 D IPSC : IPsecRemoteConnection: stopService(): result version: 5
11-29 20:24:47.569 7161 7161 D IPSC : IPsecRemoteConnection: stopService() = IPSEC_OK
11-29 20:24:47.570 7161 7205 D VPNC : WorkerService: thread: timer service end
11-29 20:24:47.579 7161 7161 D VPNC : WorkerService: onDestroy
11-29 20:24:47.580 7161 7161 D VPNC : WorkerService: clearConnectionNotification
11-29 20:24:50.706 7161 7161 D VPNC : MainActivity: onCreate
11-29 20:24:50.742 7161 7161 D VPNC : MainActivity: new config
11-29 20:24:50.744 7161 7161 D VPNC : MainActivity: onResume
11-29 20:24:50.744 7161 7161 D VPNC : MainActivity: active conn: null
11-29 20:24:50.744 7161 7161 D VPNC : ProfileClient: checkUpgrade
11-29 20:24:50.750 7161 7161 D VPNC : MainActivity: updateProfileList
11-29 20:24:50.750 7161 7161 I VPNC : MainActivity: GOT 0 profiles
11-29 20:24:50.750 7161 7161 D VPNC : WorkerClient: doBindService
11-29 20:24:50.758 7161 7161 D VPNC : WorkerService: onCreate
11-29 20:24:50.758 7161 7161 I VPNC : WorkerService: Received start id 1: Intent { cmp=com.ipsec.vpnclient/.WorkerService launchParam=MultiScreenLaunchParams { mDisplayId=0 mFlags=0 } }
11-29 20:24:50.758 7161 7161 D VPNC : WorkerService: userSerialNumber = 0
11-29 20:24:50.759 7161 15496 D VPNC : WorkerService: thread: startService
11-29 20:24:50.759 7161 15496 D IPSC : IPsecRemoteConnection: setServiceListener(com.ipsec.vpnclient.WorkerService@126e21a)
11-29 20:24:50.759 7161 15496 D IPSC : IPsecRemoteConnection: startService()
11-29 20:24:50.759 7161 7161 D VPNC : WorkerService: onBind
11-29 20:24:50.759 7161 15496 D IPSC : IPsecServiceInterface: startService(): serviceIntent: Intent { cmp=com.ipsec.service/.IPsecService launchParam=MultiScreenLaunchParams { mDisplayId=0 mFlags=0 } }
11-29 20:24:50.759 7161 15497 D VPNC : WorkerService: thread: timer service started
11-29 20:24:50.763 7161 15496 D IPSC : IPsecRemoteConnection: startService() = IPSEC_OK
11-29 20:24:50.793 7161 7161 D VPNC : WorkerClient: onServiceConnected: ComponentInfo{com.ipsec.vpnclient/com.ipsec.vpnclient.WorkerService}
11-29 20:24:50.793 7161 7161 D VPNC : MainActivity: workerclient started: com.ipsec.vpnclient.WorkerService@126e21a
11-29 20:24:50.793 7161 7161 D VPNC : WorkerService: userSerialNumber = 0
11-29 20:24:50.793 7161 7161 D VPNC : WorkerService: start Handler (com.ipsec.vpnclient.MainActivity$1) {6870340}
11-29 20:24:50.793 7161 7161 D VPNC : MainActivity: recreateDialogs
11-29 20:24:50.793 7161 7161 D IPSC : IPsecRemoteConnection: onServiceConnected(): ComponentInfo{com.ipsec.service/com.ipsec.service.IPsecService} android.os.BinderProxy@dfa1279
11-29 20:24:50.794 7161 7161 D IPSC : IPsecRemoteConnection: onServiceConnected(): startService(): version: 5
11-29 20:24:50.794 7161 7161 D VPNC : WorkerService: onServiceStatusChanged: IPSEC_OK
11-29 20:24:55.316 7161 7161 D VPNC : WorkerService: enableShutdown: false
11-29 20:24:55.343 7161 7161 D VPNC : MainActivity: onPause
11-29 20:24:55.359 7161 7161 D VPNC : LogActivity: onCreate
11-29 20:24:55.375 7161 7161 D VPNC : LogActivity: onTabSelected 0
11-29 20:24:55.377 7161 7161 D VPNC : LogActivity: ft.add 0
11-29 20:24:55.380 7161 7161 D VPNC : LogActivity: onCreateView 0
11-29 20:24:55.384 7161 15508 D VPNC : WorkerService: getLog
11-29 20:24:55.384 7161 15508 D IPSC : IPsecRemoteConnection: getLogReader()
11-29 20:24:55.942 7161 7161 D VPNC : MainActivity: onSaveInstanceState
11-29 20:25:03.314 7161 7161 D VPNC : LogActivity: onTabUnselected 0
11-29 20:25:03.314 7161 7161 D VPNC : LogActivity: onTabSelected 1
11-29 20:25:03.314 7161 7161 D VPNC : LogActivity: ft.add 1
11-29 20:25:03.320 7161 7161 D VPNC : LogActivity: onCreateView 1

Dannydet · Nov 30, 2019

Bluetooth has a very limited range so someone would need to be within 50ft of your device to control it.
Bluetooth may be turning on automatically in its settings

ocnbrze · Nov 30, 2019

i'm no code reader, but i really do not see anything nefarious here. i'm not familiar with mirrorlink, but can't it be uninstalled?

mikedt · Nov 30, 2019

kahley said:
My bluetooth has been connecting w/o authorization for some weeks.

Maybe it's an app you've got installed?

kahley said:
This evening, I screenshot this log from mirrorlink. Bluetooth is indicating mirrorlink activated BT today. I do not use samsung mirrorlink certainly not with a vehicle.

--------- beginning of main
11-29 20:21:51.466 7161 7161 D VPNC : LogActivity: onSaveInstanceState
11-29 20:24:20.462 7161 7161 D VPNC : LogActivity: onSaveInstanceState
11-29 20:24:36.131 7161 7161 D VPNC : LogActivity: onSaveInstanceState
11-29 20:24:38.117 7161 7161 D VPNC : MainActivity: onResume
11-29 20:24:38.117 7161 7161 D VPNC : MainActivity: active conn: null
11-29 20:24:38.117 7161 7161 D VPNC : ProfileClient: checkUpgrade
11-29 20:24:38.154 7161 7161 D VPNC : MainActivity: updateProfileList
11-29 20:24:38.155 7161 7161 I VPNC : MainActivity: GOT 0 profiles
11-29 20:24:38.158 7161 7161 D VPNC : MainActivity: recreateDialogs
11-29 20:24:38.158 7161 7161 D VPNC : WorkerService: enableShutdown: true
11-29 20:24:41.273 7161 7161 D VPNC : MainActivity: onPause
11-29 20:24:42.501 7161 7161 D VPNC : MainActivity: onDestroy
11-29 20:24:42.501 7161 7161 D VPNC : WorkerClient: doUnbindService
11-29 20:24:42.541 7161 7161 D VPNC : WorkerService: onUnbind
11-29 20:24:42.541 7161 7161 D VPNC : WorkerService: checkServiceStopSoon
11-29 20:24:47.551 7161 7161 D VPNC : WorkerService: stopIfNoActiveConnections
11-29 20:24:47.551 7161 7161 I VPNC : WorkerService: stopping service!
11-29 20:24:47.551 7161 7161 D VPNC : WorkerService: clearConnectionNotification
11-29 20:24:47.559 7161 7161 D IPSC : IPsecRemoteConnection: setServiceListener(null)
11-29 20:24:47.559 7161 7161 D IPSC : IPsecRemoteConnection: stopService()
11-29 20:24:47.568 7161 7161 D IPSC : IPsecRemoteConnection: stopService(): result version: 5
11-29 20:24:47.569 7161 7161 D IPSC : IPsecRemoteConnection: stopService() = IPSEC_OK
11-29 20:24:47.570 7161 7205 D VPNC : WorkerService: thread: timer service end
11-29 20:24:47.579 7161 7161 D VPNC : WorkerService: onDestroy
11-29 20:24:47.580 7161 7161 D VPNC : WorkerService: clearConnectionNotification
11-29 20:24:50.706 7161 7161 D VPNC : MainActivity: onCreate
11-29 20:24:50.742 7161 7161 D VPNC : MainActivity: new config
11-29 20:24:50.744 7161 7161 D VPNC : MainActivity: onResume
11-29 20:24:50.744 7161 7161 D VPNC : MainActivity: active conn: null
11-29 20:24:50.744 7161 7161 D VPNC : ProfileClient: checkUpgrade
11-29 20:24:50.750 7161 7161 D VPNC : MainActivity: updateProfileList
11-29 20:24:50.750 7161 7161 I VPNC : MainActivity: GOT 0 profiles
11-29 20:24:50.750 7161 7161 D VPNC : WorkerClient: doBindService
11-29 20:24:50.758 7161 7161 D VPNC : WorkerService: onCreate
11-29 20:24:50.758 7161 7161 I VPNC : WorkerService: Received start id 1: Intent { cmp=com.ipsec.vpnclient/.WorkerService launchParam=MultiScreenLaunchParams { mDisplayId=0 mFlags=0 } }
11-29 20:24:50.758 7161 7161 D VPNC : WorkerService: userSerialNumber = 0
11-29 20:24:50.759 7161 15496 D VPNC : WorkerService: thread: startService
11-29 20:24:50.759 7161 15496 D IPSC : IPsecRemoteConnection: setServiceListener(com.ipsec.vpnclient.WorkerService@126e21a)
11-29 20:24:50.759 7161 15496 D IPSC : IPsecRemoteConnection: startService()
11-29 20:24:50.759 7161 7161 D VPNC : WorkerService: onBind
11-29 20:24:50.759 7161 15496 D IPSC : IPsecServiceInterface: startService(): serviceIntent: Intent { cmp=com.ipsec.service/.IPsecService launchParam=MultiScreenLaunchParams { mDisplayId=0 mFlags=0 } }
11-29 20:24:50.759 7161 15497 D VPNC : WorkerService: thread: timer service started
11-29 20:24:50.763 7161 15496 D IPSC : IPsecRemoteConnection: startService() = IPSEC_OK
11-29 20:24:50.793 7161 7161 D VPNC : WorkerClient: onServiceConnected: ComponentInfo{com.ipsec.vpnclient/com.ipsec.vpnclient.WorkerService}
11-29 20:24:50.793 7161 7161 D VPNC : MainActivity: workerclient started: com.ipsec.vpnclient.WorkerService@126e21a
11-29 20:24:50.793 7161 7161 D VPNC : WorkerService: userSerialNumber = 0
11-29 20:24:50.793 7161 7161 D VPNC : WorkerService: start Handler (com.ipsec.vpnclient.MainActivity$1) {6870340}
11-29 20:24:50.793 7161 7161 D VPNC : MainActivity: recreateDialogs
11-29 20:24:50.793 7161 7161 D IPSC : IPsecRemoteConnection: onServiceConnected(): ComponentInfo{com.ipsec.service/com.ipsec.service.IPsecService} android.os.BinderProxy@dfa1279
11-29 20:24:50.794 7161 7161 D IPSC : IPsecRemoteConnection: onServiceConnected(): startService(): version: 5
11-29 20:24:50.794 7161 7161 D VPNC : WorkerService: onServiceStatusChanged: IPSEC_OK
11-29 20:24:55.316 7161 7161 D VPNC : WorkerService: enableShutdown: false
11-29 20:24:55.343 7161 7161 D VPNC : MainActivity: onPause
11-29 20:24:55.359 7161 7161 D VPNC : LogActivity: onCreate
11-29 20:24:55.375 7161 7161 D VPNC : LogActivity: onTabSelected 0
11-29 20:24:55.377 7161 7161 D VPNC : LogActivity: ft.add 0
11-29 20:24:55.380 7161 7161 D VPNC : LogActivity: onCreateView 0
11-29 20:24:55.384 7161 15508 D VPNC : WorkerService: getLog
11-29 20:24:55.384 7161 15508 D IPSC : IPsecRemoteConnection: getLogReader()
11-29 20:24:55.942 7161 7161 D VPNC : MainActivity: onSaveInstanceState
11-29 20:25:03.314 7161 7161 D VPNC : LogActivity: onTabUnselected 0
11-29 20:25:03.314 7161 7161 D VPNC : LogActivity: onTabSelected 1
11-29 20:25:03.314 7161 7161 D VPNC : LogActivity: ft.add 1
11-29 20:25:03.320 7161 7161 D VPNC : LogActivity: onCreateView 1

Yeh, that looks busy. Do you have any things like public rental bikes within range of your phone?

Hacked?

kahley

Lurker

Dannydet

Danny D Graphic Designer

ocnbrze

DON'T PANIC!!!!!!!!!

mikedt

你好