The friendly reminder to help and not hinder was intended for all of the thread contributors.
-
After 15+ years, we've made a big change: Android Forums is now Early Bird Club. Learn more here.
Phone is hacked
- Thread starter Dustinwp
- Start date
MrJavi
Android Expert
MrJavi
Android Expert
The custom roms I have installed on all my Samsung's were developed for a specific bootloader and modem. For the most part, it is recommended, especially when coming from a different rooted rom, to install official stock firmware. Here is just one example of many.
https://forum.xda-developers.com/note-4-sprint/development/rom-updated-1-14-2017-t3538051
Christine Bennett
Lurker
Sadly, I have to agree with you. Both my SM-J7Prime, and Tab-A 2017 have been hacked. I have most of the same overlays that you have posted installed on my phone which is now a rooted device. I haven't been able to remove them even in safe mode. My Google account has been cloned. Now my SamsungTab-A 2017 is configured with the same identifier name so that my cell phone carrier can't tell the difference between the two. Of course most say this is not possible but I will back you 100%. It's happened to me too!
If your device has had a root malware installed then the only way to get rid if it is to reflash the device. You can find the official firmware at sammobile.com.
Be aware that malware only gets on a device because you, or someone else with access to it, installs it. So don't just reinstall all of your apps because one of them will be the source of the problem.
Be aware that malware only gets on a device because you, or someone else with access to it, installs it. So don't just reinstall all of your apps because one of them will be the source of the problem.
Trumpelstiltzkin
Lurker
Try not cheating and downloading cheat apps for games frankly in my opinion you deserve what you get maybe you'll learn a lesson from it hopefully that lesson isn't how to fix your phone
Suggest you stay off the TikTok, Facebook, Twitter, etc. Good luck!
Given they way TikTok were caught spying on the iOS clipboard, said they'd stop, never stopped and now try to wriggle by claiming that their current constant clipboard access is different from previous, it's very hard to have much trust in them (including their claim that they aren't doing the same on Android, where the OS won't alert the user if they are).
Thing with TikTok, just don't post anything that the Chinese Communist Party doesn't like, even if you're not in the PRC.
AHAHAHAHAHA!! This made me laugh as I was LITERALLY thinking the same thing while reading these posts.
I mean, like, I really doubt that something this severe would happen to a normal user using a normal unrooted phone (referring to @Been hacked). It would've make more sense if the person in question has had a bad reputation with some people, otherwise it seems kinda irrational to be harassed by some random hacker for no apparent reason.
If this was a Reddit thread, people there would be pretty skeptical towards most of the hacking stories being told.
Last edited:
This is why I would much rather buy a Google Pixel or any other Android phone running vanilla Android than a Samsung phone. With Pixel devices you can choose to encrypt all your data on your phone.
From my eyes, Samsung phones always seem like they have a bad reputation when it comes to security (probably due to the insane amount of bloatware they have). Also, those two devices you own are 1) outdated 2) low-end devices and 3) probably running outdated security patches. Best solution is to upgrade to a current flagship device.
Last edited:
Actually all Android devices have had their storage encrypted by default for several years, irrespective of manufacturer. And in some respects Samsung's knox system is more secure than a Pixel.
Incidentally I am typing this on a Pixel.
Incidentally I am typing this on a Pixel.
I thought it was just Nexus devices that were encrypted. Secure or not, in actuality I don't hear much cases of being hacked on a Pixel. Not surprising since Pixels always get the latest Android updates.
I believe since Android 6, all Android devices have encrypted internal storage. Although micro-SDs, and other removable storage are not encrypted by default. Google devices like Pixel not having micro-SD storage of course.
That's partially what I was saying. I meant the Nexus 5X/6P specifically were the first phones I've witnessed to have file-based encryption, which also were Google's marshmallow phones.
Actually Samsung flagships these days often get the monthly security patch a few days before the Pixels (e.g. some Samsung Galaxy S models already have the July security patch, which the Pixels will get next week). OS updates of course lag badly behind the Pixels, but we are talking security here so that's a separate issue. The Pixels probably do get them for longer though, and lower-end Samsungs will get less support.
The truth is that there are very few cases of actual Android hacking to start with, and as there are hundreds of times more Samsungs out there than Pixels it's not clear that you can draw much of a conclusion from the numbers of reports you see. And to stress again, I'm saying this as a Pixel owner and someone who has frequently been critical of Samsung's corporate behaviour. So I'm not speaking as a Samsung fan, just trying to be fair about this.
Last edited:
Default encryption was introduced with Android 6 so if your phone CAME with 6.0 or higher, your data was encrypted and you had to jump through hoops to decrypt it, if you were so inclined. However, if you're phone came with <6.0 and you upgraded to 6.+ and your phone was not previously encrypted (encryption was an option in 5.x) it would not be encrypted as part of the upgrade.
I have had the same thing happen. Only a few stories I've found online similar. It started with my Google accounts and possibly a shady ex bf, but has gotten into everything. I believe it started through accessing my home wifi then router. Y device access code was changed when connecting through ethernet. Ive had AT&T here to show them how the default code won't work after resting hard wired through my ethernet. They said to get a different service cause "that's weird" lol. I've had all of my devices shut down at the same time (not even devices on the same service) programs installed as system apps that you can not delete on at least 6 devices. My phone bill with att shows that I'm texting every minute and that some one is using huge loads of data every hour or so. They just show the last number I texted over and over. So. For instance. I'll be sitting next to my boyfriend and it will say I texted him every minute that day. AT&T treated me the same way. Like "what are you? The president?" Meaning who the hell would want to hack me? I don't know that answer , but it's a thing and it's real. I had my last phone completely taken over so I got new service and a new phone. When I got home and used it they had gotten into it already. The start of it was through my Bluetooth I believe, samsung wearable and Bixby. I had several Google accounts and each were taken over where I would change the password and they were right behind changing it again. They use Google voice and set up voip lines to use for a click to call service it seems, where a company pays per call or text for advertising. I've intercepted some voicemails on my Google voice when I've been able to get in. They even have several of my 2factor set up to their own devices. They use knox and have set up an enterprise with workgroups and all of my emails. They use samsung and Microsoft accounts with whatever they're doing also Xbox apps. . I've given up. I just accept that nothing I do is private anymore. The only thing I've been able to use that Kind of helps is a no root firewall from playstore and I block every app and unblock when I need to use it. Here's the big one they constantly try to get through. All disguised as system apps... my next step is a new device under fake name. I've even contacted FCC over this, they say ATT Wwill contact me but never do and since these people have all access to my emails I'll never know what actual correspondence has taken place bthey throw stiff in spam or forward my emails etc. I do believe it's a network/ internet issue that then gives them access to everything in your home wifi. I am not technicologicaloy savvy in the least. I've learned so much from this I'm debating going into some cyber security profession because this shit is a disgusting invasion of privacy and no one has helped me at all. I would pay anything to stop it but all these top notch securoty companies are set up for businesses. I've tried every mallard and anti-virus and paid for so called security but it doesn't help because they can access and change passwords through my email so I inevitably lose access to the account. Also, many developer options set up on my phone. I had no clue what most of this stuff was before this. Please don't discount people's stories or situations simply because it hasn't happened to you or because you don't understand the situation. There's crazy people smarter than you out there...
Attachments
Maestreaux
Lurker
QUOTE="Hadron, post: 7963274, member: 219218"]If your device has had a root malware installed then the only way to get rid if it is to reflash the device. You can find the official firmware at sammobile.com. Be aware that malware only gets on a device because you, or someone else with access to it, installs it. So don't just reinstall all of your apps because one of them will be the source of the problem.[/QUOTE] I Wanted to offer some more accurate info here - there are several examples of in-the-wild malware and RATs that require ZERO user input. Zero day exploits like what the Israeli masterminds behind Pegasus malware utilize. The
Maestreaux
Lurker
<br>
Germans gave this exact reaction to family members and friends who claimed these same targeted gaslighting tactics were neing used on them during the rise of hitler's fourth reicht and the notorious secret police.
do your own research and see how petty the the things they would do to people were. flatten bike tires daily. move items.around in their homes. open windows to the same height throughout. they named it Zersutsung (sic) and it means "to decay". we hired their brightest minds and now we shall suffer for it.
daniel bill
Lurker
I've had much of the same issues. Even the Hitler 4th Reich rang partly familiar. But nonetheless let me be first to say after the woman a couple posts back: Google workspace. Has anyone ever looked into becoming a Google administrator. Pay like $11 a month and get a "domain" (whatever the he'll that is) and administrative access along with all the things they can do to any Google account. And the best part is they can hide the users like us from even being notified of anyone accessing our stuff. I mean I've tried to contact Google with no replies. I can't even get a login audit log of any admin activity associated with my Google account. And there should be no admin activity as I'm not paying for workspace g suite admin access. And the only way to examine this stuff is to be an admin. It's like wtf! My phone has told me I don't have admin permission or admin access when I've tried to shut off permissions in apps settings. One day I pulled up a credential or security policy or something that told me the admins name. It was "something Web" or Webster or Webber I think. It was a female and I regret not noting how I found it. My phone had voice-mail and forwarding with some 916 phone number as the destination but I still got my calls and text which doesn't make any sense. I'm considering the agent I talked with on the help texting line wasn't even a real AT&T agent when they shut off my forwarding. Why is access to engineer mode now shut off too? Google web pages telling me that my "search was malformed and not to try it again and that's all they know" Wtf did chrome just tell me? Lol. I'm not the freaking president either but I feel important. Now my galaxy s10 doesn't even factory reset normally anymore. I mean through settings or hard factory reset. I've even got a weird recovery page coming up now sometimes. Only found one page concerning that. I'll throw some pics here if I can. But everyone reading this and believing us as crazy as it sounds should maybe share the forum thread or do their own research because I swear narcissists are targeting people to gaslight for whatever reason. Maybe I have a super power I'm unaware of and they want to destroy me first. Idk whatever. I'll break their face if I could ever catch up. Since when. Does a phone; when you factory reset it; go to a white screen with a loading symbol for 20 seconds and them say "welcome" at the setup screen? All done. Reset. Yeah right. Bill gates personal computer traveling In an Einstein relativity capsule through space on the wave of an atomic bomb initiated super nova in a worm hole factory resets in 20 seconds. Sorry bud.
As far as I can tell it is linked to Google administrative access possibly initiated by clicking something in Google drive or Google one and Google calendar. It moves in deeper altering the security policies and credentials. And possibly even originating through the Sims card vulnerability that's common as the cell phones they go in. Look it up. Sim cards haven't had their security patched In a long time and we all are busy running in our circles all day and never even know that something much bigger and very quiet it lurking right above us like a spider that's already got its prey tangled up in the web. So email me any real info. Don't send any links or attachments attachment or pics because I won't open them even though I Hella want too. ***emails redacted*** Thank you. Sorry I didn't have more pics. I factory reset before finding this thread. Even though I don't think the phone is really reset.
As far as I can tell it is linked to Google administrative access possibly initiated by clicking something in Google drive or Google one and Google calendar. It moves in deeper altering the security policies and credentials. And possibly even originating through the Sims card vulnerability that's common as the cell phones they go in. Look it up. Sim cards haven't had their security patched In a long time and we all are busy running in our circles all day and never even know that something much bigger and very quiet it lurking right above us like a spider that's already got its prey tangled up in the web. So email me any real info. Don't send any links or attachments attachment or pics because I won't open them even though I Hella want too. ***emails redacted*** Thank you. Sorry I didn't have more pics. I factory reset before finding this thread. Even though I don't think the phone is really reset.
Attachments
Last edited by a moderator:
I removed your email addressed from the post. The only good thing that can come from that is a ton of spam. If you have notifictions turned on you should get emails if someone replies to this thread.
@daniel bill why do you guys that think that your phone is hacked, make these ginormous run-on sentenced single paragraph statements? its so hard to read and understand your points.
all of the stuff you stated does not mean your phone is hacked. hackers for the most part hack phones to steal your identity, get other personal data and even phone numbers from your contact list. hackers do not like to make their presence known.
a factory reset can take up to 20s or so. it is only wiping your data partition and nothing else.
and lastly google admin is not as easy to get into someone else's as you are thinking it to be. if you have doubts about your google account, then change your password and setup two step verification.
all of the stuff you stated does not mean your phone is hacked. hackers for the most part hack phones to steal your identity, get other personal data and even phone numbers from your contact list. hackers do not like to make their presence known.
a factory reset can take up to 20s or so. it is only wiping your data partition and nothing else.
and lastly google admin is not as easy to get into someone else's as you are thinking it to be. if you have doubts about your google account, then change your password and setup two step verification.