Say I've rooted my phone. How do I find out whether the rootkit has installed a keylogger

[lentulus]

in rom that sends all my user names and passwords back to a central server? The uncertainty around this question means that using a rooted phone for e-mail (given the role of e-mail accounts in password recovery for online bank/brokerage accounts), or indeed, any input involving user ids and passwords, is very iffy.

 

[scary alien]

Welcome to our AndroidForums, @lentulus.

Your best bet would be to install a firewall to monitor and control what comes in and out of your device:

https://play.google.com/store/apps/details?id=dev.ukanth.ufirewall​

See this starting post in this thread:

http://androidforums.com/threads/why-do-we-root-then-vs-now.887730/page-4#post-6823056​

for good information re. this.

Cheers!