I can say that you have been hacked and it is through the internet or network. My phones, both of my brothers phones(plus several other ones they have), my daughters phone-and she is 800 miles away from us, plus 3 android tablets, 3 laptops, and 2 desktops have all been hacked! Not to mention my BMW through Bluetooth. I told my parents our conversations were being listened to and it was proven October 11 when they cut in on my parents phone and asked if we were done yet. It sounds sci-fi, spy movie stuff, but it is real. All android devices have been rooted and a factory reset does nothing, cache partition really does nothing and they made it where you can do nothing in boot mode. I have made it into the rooted system but they have it locked down as well. I could view certain files, like the git log. That one file showed where they started hacking my device on 3-22-17. But ramped up and made themselves really known on 9-5-19. They changed some of the security certificates and changed the operating system. Starting with an app that shows up in all androids, system ui. They even got a phone I haven't used in 5 years and did not go on the internet or my email on it. Was in settings only and somehow Wi-Fi was turned on but I never connected it. It does not even have a sim card. I have gotten 2 new phones since 9-14-19. The first one I didn't even get home with when they had gotten into it. 2 weeks later I got another one and it took a day and a half. I have been to 3 public libraries that their computers are also hacked, 2 of them I know came from a guy that had been hacked and used them. My parents were hacked over their magic jack talking to me. It does however seem to attach to Google, Facebook, and Microsoft products or apps. Everything on my devices are overlays. Whatever this malware is, its vicious. My directory tree is very different from my brothers. It seems they are being done by different people. I have found a few apps to look for are System UI, a 2nd Android Setup, Emergency information, Facebook App installer, Facebook App manager, Facebook Services, FM Radio service(did not come on my new phone), AASAservice, Page Buddy, com.codeaurora.FM recording(this is on ALL of our devices, old and new), DirectConnectManager,Email Storage, Email sync, Enterprise Sim Pin Service, epdg test app, filter installer, IMS service, interaction control, lwlan settings(on an android) KLMS Agent, MDMApp, MmsService, Nearby Service, OMACP, Passpoint Settings, added Phone apps, photo screensavers, popupui receiver, ringtone backup, root browser, root pa, RoseEUKor, Safety information, Screen mirroring, secure ui service, security storage, security log agent, settings storage(does settings need storage?), silent logging, smartcard service, software update(I have 2 now), SoundAlive, SysScope, TouchWiz Home(this was added about a year ago) wlan test, Wluc test. I know these to be because around 6 months ago I wrote down all the apps in my phone and in the last month I now have these as well. I just want to let people know there is some bad stuff going around and what to look for and I suggest checking your apps on a regular since they do it quietly at first. I had to disconnect my drivers seat on my car because they were moving it up and down and forward as I drove. Stay alert is all I can say!
And in fact for the peeps that made things like KingRoot and other app only "one click" exploit rooting apps, their business very much ended with Android 6 and above. And they are actually discontinued and unsupported now.
