AirDroid Strange Phenomenon - AirDroid

I'm using AirDroid and It works just fine.
One thing I noticed - ever since I installed It when I get my lock screen pattern wrong more than 2 times there's a camera shutter sound and sometimes you can see the camera app for 1/2 a second before it disappears... wtf?
I'm sure It's AirDroid because I removed it and made sure problem was gone then restored it (titanium) and problem was back.

I haven't used airdroid for about a year, but I know many (security) apps have the feature where if somebody types the wrong password a set number of times, the front camera takes a picture and location and sends it to the registered account email, if available.
I assume airdroid has the same feature.

This is a standard feature in AirDroid. It's called Intruder.
If you've enabled Find Phone in AirDroid, then a photo will be automatically taken when someone tries but fails to unlock the device. After two consecutive failed attempts or if the device is not unlocked within 2 mins of the first failed attempt, the photo will be uploaded to your AirDroid account to help you find who's trying to unlock your device.
The feature is also documented in AirDroid support center.

Related

[Q] Unauthorised message sent from Whatsapp

Something odd happened today with Whatsapp and I just wanted to report it in case it also happens to anyone else or anyone can shed light on it.
I left the house today at 8.45am to go to work. I cycle to work and so I had the phone in my bag . The phone was on the home screen before I turned off the screen and put it in my bag. I didn't get the phone out of my bag until 9.30am. However, when I checked my Whatsapp, I noticed there was a message containing a single smiley face to one of my contacts (they happened to be the contact at the top of the list as they were the last one I contacted legitimately). There's no way the phone would have accidentally sent that in my bag because of the way the phone was placed in the bag, there is nothing else in the pocket. Even if it was accidental, the presses would have had to turn on the phone, go launch Whatsapp, click the top contact, enter a smiley face message, press send and then press the home button to get back to the home screen before the phone switching off (or timing out). That's near impossible for it to do that.
I have the Nexus 5 phone. It's using Android 5.0.1 and I have the latest Whatsapp application with the new Whatsapp calling feature. I also use Whatsapp via the web using my Home and Work PC (both of which I have sole access to and both of which were turned off). I also checked my phone settings to see what computers were connected to my Whatsapp app, and it confirmed that only those two computers had access (I removed access to all PCs anyway and re-added my work PC).
Any ideas or thoughts?
Techno79 said:
Something odd happened today with Whatsapp and I just wanted to report it in case it also happens to anyone else or anyone can shed light on it.
I left the house today at 8.45am to go to work. I cycle to work and so I had the phone in my bag . The phone was on the home screen before I turned off the screen and put it in my bag. I didn't get the phone out of my bag until 9.30am. However, when I checked my Whatsapp, I noticed there was a message containing a single smiley face to one of my contacts (they happened to be the contact at the top of the list as they were the last one I contacted legitimately). There's no way the phone would have accidentally sent that in my bag because of the way the phone was placed in the bag, there is nothing else in the pocket. Even if it was accidental, the presses would have had to turn on the phone, go launch Whatsapp, click the top contact, enter a smiley face message, press send and then press the home button to get back to the home screen before the phone switching off (or timing out). That's near impossible for it to do that.
I have the Nexus 5 phone. It's using Android 5.0.1 and I have the latest Whatsapp application with the new Whatsapp calling feature. I also use Whatsapp via the web using my Home and Work PC (both of which I have sole access to and both of which were turned off). I also checked my phone settings to see what computers were connected to my Whatsapp app, and it confirmed that only those two computers had access (I removed access to all PCs anyway and re-added my work PC).
Any ideas or thoughts?
Click to expand...
Click to collapse
May someone family member of yours did it accidently
Sushant Rohan said:
May someone family member of yours did it accidently
Click to expand...
Click to collapse
Phone was in my bag while I was cycling and I have sole access to my PCs.
same happened... a message containing a contact was send to one of my groups from my account.... wat the hell is happening...
aruns r said:
same happened... a message containing a contact was send to one of my groups from my account.... wat the hell is happening...
Click to expand...
Click to collapse
It's very strange but it hasn't happened since I reported this message. Do you use the Web interface for Whatsapp? I am only speculating, but I think it may have been something to do with that. I have since factory reset my phone a number of times and did not install a number of games/apps that I had previously. Therefore, it's plausible that it may have been caused by some malicious app on my phone.
If you wanted to list the apps you have installed (either here or in a PM) I can tell you if any of them sound like ones I had installed previously.

[Q] OTA Update Broke Smart Lock?

Downloaded the OTA update on my S6 yesterday, and I noticed that Smart Lock (the feature that keeps your phone unlocked if you are in trusted locations, etc) had stopped working. I went to check the Smart Lock settings and now they are greyed out! Did this happen to everyone or just me?
people in Edge forum reporting same issue so you are not alone.
i think most folks here are waiting the couple days needed for a dev to update the OTA to be root before updating which is why you dont see a lot of response to this question.
It definitely messed up lock screen stuff. I use fingerprint and now I get the lock at the bottom of the lock screen sometimes. When I pull it up it does nothing, then switches to fingerprint mode.
Well, disregard my complaint. User ignorance. The day they update rolled out I also bought a new car with bt (for the first time)and paired my device. Apparently I just didn't recognize what smart lock looked like.
I think this update messed up the camera or something. My pictures seem blurry as hell.
Sent from my SM-G920V using XDA Free mobile app
I can confirm that mine does the same thing!
Glad it was figured out. I was going to say my smart lock has been working fine with my LG G Watch after I installed the update.
If you have a corporate Exchange account which requires a password or fingerprint, then Smart Lock will no longer work after the Samsung update a few days ago. I'm getting around the problem at the moment by setting up some profiles in Tasker. I have also read that if you remove your Exchange account and switch to Nine Exchange email from the Play store, that brings smart lock functionality back.
EDIT:
More testing. After disabling Tasker, I have confirmed that removing my Exchange account from the phone does indeed make smart lock start working as expected again.
Also, I've downloaded and set up Nine and Smart Lock still works as expected. Just FYI in case anybody else is experiencing this issue. Something to look at.
You normally use gmail for exchange? If so, uninstall updates for gmail then readd your account and smartlock will work again. This is a known issue on other devices.
One of the versions of gmail after 5.1 broke it... You may not see the issue unless you reactivate gmail. Many users report smartlock working until either readding their account or reactivating gmail. But regardless, downgrading gmail seemed to work...

[Completed] Z740g - Phone Self Reset And Keyboard Is Gone.

When I woke up today to get ready for work, my rooted Z740g was on the beginning tutorial for setting up the phone. While I was asleep the phone reset itself and erased everything I had on the phone storage. When I tried setting up the phone to see what was going on, the default keyboard app was not there! I had to use google voice to download a keyboard app from a website other than the google play store. No one had physical access to my phone and I had no other device sign ins on my google account history. I didn't grant any strange programs super user permission except for android lost. I didn't see any logs in androidlost and it uses my google account to sign in and I wasn't seeing any strange devices on that log. Do you think that this is some strange fluke or some type of malicious attack? My internal storage was almost full and occasionally my phone would reboot on its own and had various small bugs like battery monitoring being inaccurate on occasion. I'm worried about security breaches on my phone because I have seen how easy it is for someone to access the microphone, camera and any files on the device. I removed my sim and had to change all my online passwords.
Would flashing a rom completely remove any malware that might be on the device?
edit: I just noticed that there were two versions of chrome on my phone when I was trying to figure out what happened earlier today. I did notice that chrome looked different. I see a version 39 from before the wipe occurred and now I have version 28.0.1500.94 I looked up release dates and version 28 was released in 2013 and the phone wasn't even released until sometime in 2014. What gives?
foolioGrimz said:
When I woke up today to get ready for work, my rooted Z740g was on the beginning tutorial for setting up the phone. While I was asleep the phone reset itself and erased everything I had on the phone storage. When I tried setting up the phone to see what was going on, the default keyboard app was not there! I had to use google voice to download a keyboard app from a website other than the google play store. No one had physical access to my phone and I had no other device sign ins on my google account history. I didn't grant any strange programs super user permission except for android lost. I didn't see any logs in androidlost and it uses my google account to sign in and I wasn't seeing any strange devices on that log. Do you think that this is some strange fluke or some type of malicious attack? My internal storage was almost full and occasionally my phone would reboot on its own and had various small bugs like battery monitoring being inaccurate on occasion. I'm worried about security breaches on my phone because I have seen how easy it is for someone to access the microphone, camera and any files on the device. I removed my sim and had to change all my online passwords.
Would flashing a rom completely remove any malware that might be on the device?
edit: I just noticed that there were two versions of chrome on my phone when I was trying to figure out what happened earlier today. I did notice that chrome looked different. I see a version 39 from before the wipe occurred and now I have version 28.0.1500.94 I looked up release dates and version 28 was released in 2013 and the phone wasn't even released until sometime in 2014. What gives?
Click to expand...
Click to collapse
Hi, thank you for using XDA assist.
There is a general forum for android here*http://forum.xda-developers.com/android/help*where you can get better help and support if you try to ask over there.*
Good luck.

Ghost in the Machine

Hi guys!
Tried the search but came up with nothing so here goes...
I must admit I'm not very tech savvy but I can follow instructions no worries
I joined mainly because my Samsung Galaxy S8+ (un-rooted) started to behave very strangely early this year.
(and I want to trick it up after warranty expires in August ?)
Short story is that my Samsung account got hacked (or it at least seems like it) and the perp was then able to control my phone remotely. It was incredible watching my phone do as it pleased and all I could do was sit back and watch. Funny thing is that I've never actually toggled the RC switch (find my phone)...
My local carrier (Telstra Bigpond - Australia) account as well as my Google account got taken over shortly after. This would have given whoever it was access to my 3 cloud accounts which add you can appreciate would contain some sensitive material.
Whoever is responsible could well be a member on here so "Hi, there!! "
I pulled my sim and sd card and switched the phone off so I could decide what to do next.
I got a password manager app, changed all passwords (lucky my partner had a spare iPhone 5S sitting around up I could get online) and factory reset the phone.
All seemed to be going well until a few days ago...
I got "timed out" on my Samsung account (is that even possible?!) and while I was putting the password in (on the Samsung website - silly mistake!) just as I hit next I noticed a few dots in a square pattern that did a spinning type of graphic over the password entry box.
Continuing onto the next screen where the two step verification was, which was to send a text to my phone to receive a code and bang! Before I even received the text a six digit code appears in the fill box on the screen (same spinning dots in a square pattern) right before my eyes and then I receive the text afterwards! The numbers matched!!
I’ve also been asked to enter my Google credentials on more than one occasion lately from being “signed out”...
I don't know what to do!
I've tried all of the popular virus type apps and a few file managers to no avail. More like I've been hacked than a virus?
I've removed apps and shut down almost all of them as well as toggling between mobile data and WiFi and restored the phone twice back to earlier backups from over 6 months ago.
I've only ever downloaded from the Play Store apart from just the once getting your better version of the Play Store XDA (LABS) app.
What might be noteworthy is when I was using Google's help function it said that I had a "modified Android" and to contact manufacturer. I can guarantee the phone has never been cracked open.
I can provide screen shots from DevCheck (FLAR2) but I really don't know what I'm looking at. I also don't have any unknown apps etc...
I really don't know what to do next...
Any advice please??
Sorry about the long post.
All the best,
Crackles
Took phone to Samsung and they wiped the device and installed current (Android Pie 9 w. Feb 01 security update) so was looking forward to having a play with the new os until I went to add my Samsung account details...
Entered the password then the 2-step security kicked in to send a text to my number.
The earlier 4 circling dots dropped the 6 digit code into the fill box before I even received the sms! Device (on it's own jumped straight to the remote control button in the Find my Device security section) then attempted to change the password!
Only thing that prevented that from being carried out was I had biometrics activated and stopped the action using my fingerprint.
Seriously no one has any idea on what to do?!
I also had installed a replacement sim card.
I also can't uninstall updates on certain apps like Google Play Services etc, and some apps either have a dead link (press it and nothing happens) or Play Store can't find the app when I hit the downloaded from Play Store thingy at the bottom of the app description page. Hope that makes sense.
As you said, they wiped the phone, which means they most likely flashed the whole firmware, so there's no way for any malware to remain installed. But for what it's worth, you can try to re-flash the firmware yourself using Oding to make sure the whole flash is clean.
If your phone really was infected with any kind of malware, it must have been a 3-rd party app you have (repeatedly) installed. Some apps like Google Play Services cannot be uninstalled because they are vital for system's (or rather apps installed from Play Store) propper functioning.
Also, even if you had infected your device, it would not be able to take control of your device to the extent you described because of app sandboxing, which cannot be broken unless the app constitutes itself as a system app (because every part of the system has to be cryptographically signed, this would break the boot and brick your device) or the user (you) would have to allow the app the necessary permissions to carry out these tasks.
Hey Kernel thanks for the reply ?
Yes I know what I'm saying sounds crazy and even the missus said I was nuts till I showed her.
I can't screen record any more either...
I'm noticing odd little things like when I pull the notifications screen down for a second or so the NFC, Bluetooth and nearby icons are lit up but then revert back to a if they were off. I've switched all of these items off in the settings so are they being sneaky?
So far nothing really bad has happened apart from not being able to put my credentials into the PayPal app. That's using both Last Pass auto-fill and manually entering the email and password. I've un-installed and re-installed many times and it's the same. I'm not going to add any banking apps just yet.
Facebook also got installed in the background about 4 times within a few minutes. Seemed odd to me. I think I've got a screenshot of that.
Malwarebytes found an issue with I'm guessing a theme I got from the Samsung Galaxy Store so I removed it, chose another and it seems OK.
There's still a few odd things happening like certain settings reverting back to something different from what I'd set.
I'll keep tinkering and post anything that stands out.
Is there an app or something that can check every file on my phone and tell if something isn't quite right?
I don't have a pc at the moment but when I do I'll look into Odin.
Thanks again for taking the time I know I sound like a lunatic and tbh I really wish I was haha!! :laugh:
Hmm interesting...
When I tried to upload the screenshot it stopped and said "bad request"...
Sent from my SM-G955F using XDA Labs
Could all this weird bs be happening if the home WiFi has been hijacked?
Sorry for dumb questions.
Sent from my SM-G955F using XDA Labs
Whatsapp does the same thing, autocompletes the code, before de sms is coming. This is not a malware. But, don't use password manager... Those can be hacked.
Really my password manager can be hacked?!
I'm using Last Pass.
So moving on I started to poke around the WiFi router and found the PnP enabled and my device was sharing with another device. I did not authorise this. I've since reset the router, changed the pin and access code, disabled the WPS and also factory reset the device that was "sharing" with mine... The owner of said device no longer lives with me. I'm just glad I confiscated the phone from him before he left.
When I'm researching possibilities of what could be going on with my phone the pages won't load. It's like my searches are being monitored and the data is being stopped. I tested this with my partner's phone (on mobile data) and the exact Web pages loaded right up on her's without a hitch! I tried again on mine and they just stopped. Pages would load straight away on mine if searching for something completely different like rc cars or bmx related content. Stuff to do with my phone just won't work ffs!
Like when I tried my first post on here. It simply would not post it up! I ended up having to copy/paste the draft and emailing it to another account that I made up on the spot on her phone. Hence the two usernames in this thread.
I got the 3C TOOLBOX app and in the app management section, Task Manager under service many of them are "custom entries" and I cannot un-tick, modify or reset back to the original version of any of these apps. Google Play Services was the worst. Pretty much every thing it was capable of doing had a "custom action" and I could not do anything with it.
Am I doing something wrong or do I have a serious invasion of my phone..?
Thinking about smashing this thing to bits and getting an S10+ ??
Also the Bluetooth, NFC & Nearby buttons almost any me of the day/night are on for a split second when I drag the motivation panel down. These are all set to "OFF" in settings...
What
The
F--k?!?!?!
Sent from my SM-G955F using XDA Labs

Issue with passkeys on android

Hi everyone
i'm using two android phones which are compatible with google passkeys. I have problem with my new phone, because i don't see notifications from passkeys to authorize my login request.
Basically my older phone is fine, no matter when i log in to any website which supports webauth/passkeys, i always receive notification, i'm scanning my fingerprint and it's working great omegle xender .
I also have newer phone which i purchased like 5 months ago and there i have problem. Both phones are listed on google passkeys website and both are registered as keys to various websites. Unfortunately when i decide to authorize myself on page through new phone i don't receive any notification on my screen. The only option i have to click "Use a different Phone or tablet", scan again code and then it'll work.
After this another scan, it'll work for few minutes? i receive normally all notifications, but after like 20 minutes it break again. I've checked and notifications are enabled for google chrome.
Any ideas on how to fix that?

Categories

Resources