I've been hacked. - Sony Xperia XA Questions & Answers

According to facebook report over my mail, someone has entered in to my fb via Xperia XA, Saratoga, CALIFORNIA, US. I am at Europe.
Most likely i was blocked because my phone Ip have changed somehow.Now i cant enter in to my account with msnger and facebook (only from browser) app on my phone. Think the security system is blocking my phone.
Ps: i had to swap Wifi with 4g in order to get access.

Did you use any vpn to access Fb?

Think not, just standart office Wifi connection. And i just check , my office location (according to my laptop is Europe), but according to my phone 4g i am at California ,Saratoga. So whats going on ?
Its something from the phone system, i changed the firmware few days ago, and the phone is encrypted now, so maybe its forcing the apps to connect via VPN network, or who knows...

really ?? my phones comes with greek firmware and now I use south Africa firmware !! is there any problem ?

Have you some apps from unofficial markets like Aptoide? Have you some apps downloaded from file-sharing links or P2P? If yes, don't search away, you probably have a malicious app.
If you are rooted, use a permission manager app, Xprivacy is good for that and allow blocking strange permissions (Facebook, Google accounts, contacts, device ident, ... for an app who don't need them).

rrvuhpg said:
Have you some apps from unofficial markets like Aptoide? Have you some apps downloaded from file-sharing links or P2P? If yes, don't search away, you probably have a malicious app.
If you are rooted, use a permission manager app, Xprivacy is good for that and allow blocking strange permissions (Facebook, Google accounts, contacts, device ident, ... for an app who don't need them).
Click to expand...
Click to collapse
Might have some. How to detect which one is virus ?

hp6830s said:
Might have some. How to detect which one is virus ?
Click to expand...
Click to collapse
1) Try to re-download apps from trusted sources.
2) Try AVG app integrated in the device to scan it.
3) Use Xprivacy and block unnecessary permissions on suspicious apps, make some test (block/unblock) to understand what mean each permissions. For sample, a game generally don't need root, phone contacts or SMS and needs sensors, storage and Internet.

rrvuhpg said:
1)
3) Use Xprivacy and block unnecessary permissions on suspicious apps, make some test (block/unblock) to understand what mean each permissions. For sample, a game generally don't need root, phone contacts or SMS and needs sensors, storage and Internet.
Click to expand...
Click to collapse
nICE,will try that ,got some apps which are not suitable for my device. Think they might be suspicious.
So Xprivacy installs xFrame too ?

hp6830s said:
nICE,will try that ,got some apps which are not suitable for my device. Think they might be suspicious.
So Xprivacy installs xFrame too ?
Click to expand...
Click to collapse
Not suitable ?? Big targets to be suspicious are warez/cracked apps.

rrvuhpg said:
Not suitable ?? Big targets to be suspicious are warez/cracked apps.
Click to expand...
Click to collapse
One reason I'll never use apps like that in the first place. Just asking for trouble.
Sent from my Xperia XA using XDA Labs

aidy.lucas said:
One reason I'll never use apps like that in the first place. Just asking for trouble.
Sent from my Xperia XA using XDA Labs
Click to expand...
Click to collapse
if you know what the app is its ok I think !

rrvuhpg said:
Not suitable ?? Big targets to be suspicious are warez/cracked apps.
Click to expand...
Click to collapse
yea few which i was trying to connect a DSLR and use the phone for shutter remote.
It looks like i have already removed the antivirus app.

Related

[Q] App and privacy issue

I'd like to pone a privacy problem.
In Android ,installed apps require permissions to operate. Permissions to access the Phone Id (also the IMEI) or the position of the device or the access to your calls seem very common in most apps on the market.
Permission for the position seems ok for a Gps navigation program but also for an alarm clock? Where do they sent my data and what use they do?
I use LBE privacy guard but it is enough?
what do you think?
Toriko said:
I'd like to pone a privacy problem.
In Android ,installed apps require permissions to operate. Permissions to access the Phone Id (also the IMEI) or the position of the device or the access to your calls seem very common in most apps on the market.
Permission for the position seems ok for a Gps navigation program but also for an alarm clock? Where do they sent my data and what use they do?
I use LBE privacy guard but it is enough?
what do you think?
Click to expand...
Click to collapse
are you a thief?? :laugh:
Most of the permissions are for ads bases on location
Batcom2
xxXismakillXxx said:
are you a thief?? :laugh:
Click to expand...
Click to collapse
No, but I'm thinking about it. Seriously, have you ever wonder why you get web searches, translations and other services for free and yet the companies that handle the sites are billionaires? Because they sell your personal data and your commercial preferences to other companies without your permission. Think about it when you post your personal data on the web.
zelendel said:
Most of the permissions are for ads bases on location
Batcom2
Click to expand...
Click to collapse
I'm not so sure about that. However if I buy an ad free app , there shouldn't be any ads. And why an alarm clock need my phone id and can access my call log? It's fishy.
Toriko said:
I'd like to pone a privacy problem.
In Android ,installed apps require permissions to operate. Permissions to access the Phone Id (also the IMEI) or the position of the device or the access to your calls seem very common in most apps on the market.
Permission for the position seems ok for a Gps navigation program but also for an alarm clock? Where do they sent my data and what use they do?
I use LBE privacy guard but it is enough?
what do you think?
Click to expand...
Click to collapse
Rule of thumb: Every app that asks for unique device numbers, location and a backchannel does so because it contains advertisement. Advertisers simply love to track customers and find out as much as possible about them in order to deliver ads that actually result in a sale (contrary to popular belief, they don't do that just to annoy the crap out of everyone).
Personally, I don't use LBE privacy guard. I haven't seen the source and that pretty much means it is as much a blackbox as the apps, it is suppose to protect me from. For me, rooting and installing a firewall to simply block the backchannel does the trick.
If u filter out apps for their permissions, u will have nothing but the system apps left on the phone! even I used to check permissions b4 downloading at the beginning. Then as I downloaded a lot of apps i was lazy enough to give a dang to wat permissions the app wants! just see through the comments (reviews) to know if there are any issues with the app! That's it.! And nowadays the app developer tries to explain the reason for each permission the app asks for. So sooner all apps are gonna be explaining their permissions! (hopefully)
zelendel said:
Most of the permissions are for ads bases on location
Batcom2
Click to expand...
Click to collapse
This is true although some use it to collect app usage information for the purpose of improving the app. Unfortunately, it can be difficult to determine exactly why a particular permission is requested.
onyxbits said:
Personally, I don't use LBE privacy guard. I haven't seen the source and that pretty much means it is as much a blackbox as the apps, it is suppose to protect me from. For me, rooting and installing a firewall to simply block the backchannel does the trick.
Click to expand...
Click to collapse
Installing a firewall won't solve the problem, because you can't stop apps that need connection : together with the access to the net they send your data. LBE allows the access for the app but block the transmission of your id together with other data.
Anyway LBE also works as a firewall. There's another app that works the same way (Pdroid) but supports only Gingerbread.

[Q] Apps restricted via Google Play if ROOTED?

I came across this bit on wikipedia:
System access and copy protection
Applications developed for distribution on Google Play allow the developer to enable copy protection which prevents the end user from copying the application from the phone. Because the Android Dev Phone allows unrestricted access to the OS, this copy protection is disabled. If the developer enables copy protection on their application, then the application does not appear on Google Play for the Dev Phone.[3]
Click to expand...
Click to collapse
http://en.wikipedia.org/wiki/Android_Dev_Phone#Galaxy_Nexus
Now i was thinking, isnt a rooted phone technically same as developer edition phone? After all they both would have unrestricted access to the OS. Therefore is it so that as my device is rooted I might be missing some apps (though I havent noticed so far!).
shmotog said:
I came across this bit on wikipedia:
http://en.wikipedia.org/wiki/Android_Dev_Phone#Galaxy_Nexus
Now i was thinking, isnt a rooted phone technically same as developer edition phone? After all they both would have unrestricted access to the OS. Therefore is it so that as my device is rooted I might be missing some apps (though I havent noticed so far!).
Click to expand...
Click to collapse
I don't think so, it should be the opposite, if you have root, you can modify your build.prop to make your device compatible with ALL Apps.
KuGeL94 said:
I don't think so, it should be the opposite, if you have root, you can modify your build.prop to make your device compatible with ALL Apps.
Click to expand...
Click to collapse
Do you have a rooted device?
Can you confirm if there are some apps that you cant access (considering, or rather assuming, you havent modified your build.prof, yet).
shmotog said:
Do you have a rooted device?
Can you confirm if there are some apps that you cant access (considering, or rather assuming, you havent modified your build.prof, yet).
Click to expand...
Click to collapse
I do have a rooted stock ROM, but havent stumbled across any app that I cant acces, maybe tell me some examples and i will see if i can acces them or not, there are always some apps that arent compatible like high end games or so because the hardware of the moto g isnt powerful enough, gta sa for example
I think apps like play TV & movies won't work, as well as some media streaming apps but not 100% been off the scene a few years.
Sent from my XT1032 using Tapatalk
mutantlx said:
I think apps like play TV & movies won't work, as well as some media streaming apps but not 100% been off the scene a few years.
Sent from my XT1032 using Tapatalk
Click to expand...
Click to collapse
bought a stupid movie by google play just to test, works. hunger games, supposed to be top film, couldnt stand 5 mins of it.
It's possible for an app developer to block installation on rooted devices for a specific app - e.g. the SkyGo (UK TV provider) and Barclays Online Banking app can't be installed on rooted devices. There aren't many though and for those that are blocked you will find a thread somewhere on XDA where clever people have worked away around the restriction or are trying working a way around the restriction.
neu - smurph said:
It's possible for an app developer to block installation on rooted devices for a specific app - e.g. the SkyGo (UK TV provider) and Barclays Online Banking app can't be installed on rooted devices. There aren't many though and for those that are blocked you will find a thread somewhere on XDA where clever people have worked away around the restriction or are trying working a way around the restriction.
Click to expand...
Click to collapse
you are absolutely right about barclays. even though i dont have an account there, installed it just to test. quite disappointed.
my own banks app works but i read the fineprint and it said you shouldnt install it on rooted device, against t&c.
this is really depressing
Yep the restrictions on the Barclays app is the main reason I've left my Moto G stock.
What do the T&C's for your own banking app say? As far as I understand iit the worst case scenario is that your not covered for any loss if your bank account is hacked/defrauded AND the bank can categorically prove that the source of the hack was the app on a rooted device.
It does seem a bit ridiculous to me as there is nothing stopping anyone logging in to internet banking via their browser on a rooted phone, or for that matter on a computer in an Internet cafe somewhere which is IMHO far more risky. It's all about due diligence - if your account is defrauded and the bank can prove you haven't taken reasonable care with your bank cards / pin numbers / internet banking / connected apps and that is the cause of the fraud then you don't have the financial protection that you would get otherwise.
shmotog said:
you are absolutely right about barclays. even though i dont have an account there, installed it just to test. quite disappointed.
my own banks app works but i read the fineprint and it said you shouldnt install it on rooted device, against t&c.
this is really depressing
Click to expand...
Click to collapse
I think there was a app called rootcloak and it hides root access, or something like that, you need xposed for it to work and if your already rooted might as well install xposed here's the link
http://www.xda-developers.com/android/xda-xposed-tuesday-root-cloak-xda-developer-tv/
Sent from my Nexus 7 using Tapatalk
tkelly0727 said:
I think there was a app called rootcloak and it hides root access, or something like that, you need xposed for it to work and if your already rooted might as well install xposed here's the link
http://www.xda-developers.com/android/xda-xposed-tuesday-root-cloak-xda-developer-tv/
Sent from my Nexus 7 using Tapatalk
Click to expand...
Click to collapse
cheers bro ill check that out
neu - smurph said:
Yep the restrictions on the Barclays app is the main reason I've left my Moto G stock.
What do the T&C's for your own banking app say? As far as I understand iit the worst case scenario is that your not covered for any loss if your bank account is hacked/defrauded AND the bank can categorically prove that the source of the hack was the app on a rooted device.
It does seem a bit ridiculous to me as there is nothing stopping anyone logging in to internet banking via their browser on a rooted phone, or for that matter on a computer in an Internet cafe somewhere which is IMHO far more risky. It's all about due diligence - if your account is defrauded and the bank can prove you haven't taken reasonable care with your bank cards / pin numbers / internet banking / connected apps and that is the cause of the fraud then you don't have the financial protection that you would get otherwise.
Click to expand...
Click to collapse
Yeah you're absolutely right. However HSBC, the one I'm with, installs fine, but in its terms and conditions it says dont install if youre rooted. So well I uninstalled it before I even logged in with it. I just do banking on my desktop pc now.
Another app I came across that doesnt work in 4OD. At same time BBC iPlayer works.
neu - smurph said:
Yep the restrictions on the Barclays app is the main reason I've left my Moto G stock.
What do the T&C's for your own banking app say? As far as I understand iit the worst case scenario is that your not covered for any loss if your bank account is hacked/defrauded AND the bank can categorically prove that the source of the hack was the app on a rooted device.
It does seem a bit ridiculous to me as there is nothing stopping anyone logging in to internet banking via their browser on a rooted phone, or for that matter on a computer in an Internet cafe somewhere which is IMHO far more risky. It's all about due diligence - if your account is defrauded and the bank can prove you haven't taken reasonable care with your bank cards / pin numbers / internet banking / connected apps and that is the cause of the fraud then you don't have the financial protection that you would get otherwise.
Click to expand...
Click to collapse
Could you confirm something for me, have you come across a Call Recorder that works on your moto g? I'm on ANDROREC and it works fine on 4.3 but when I updated to kitkat it stopped. Thats the primary reason why I rooted in first place to have call recorder. Could you check that for me @Neu-smurph?
tkelly0727 said:
I think there was a app called rootcloak and it hides root access, or something like that, you need xposed for it to work and if your already rooted might as well install xposed here's the link
http://www.xda-developers.com/android/xda-xposed-tuesday-root-cloak-xda-developer-tv/
Sent from my Nexus 7 using Tapatalk
Click to expand...
Click to collapse
installed xposed, 4od or barclay still dont work.
shmotog said:
Could you confirm something for me, have you come across a Call Recorder that works on your moto g? I'm on ANDROREC and it works fine on 4.3 but when I updated to kitkat it stopped. Thats the primary reason why I rooted in first place to have call recorder. Could you check that for me @Neu-smurph?
Click to expand...
Click to collapse
It installs fine and appears to be working, but the recordings are empty - no audio.

security concerns migrating from iOs to Android

As title suggests, coming from a so called "clean" iOS environment to Android, my main concern how susceptible is my data to being stolen. I have no (current) plans to root my next phone and will be used mainly from business, but from what I have read in the past even google play store apps have been to known to have malicious content. Am I worrying too much ? I do carry sensitive work data on my iPhone.
applefag said:
As title suggests, coming from a so called "clean" iOS environment to Android, my main concern how susceptible is my data to being stolen. I have no (current) plans to root my next phone and will be used mainly from business, but from what I have read in the past even google play store apps have been to known to have malicious content. Am I worrying too much ? I do carry sensitive work data on my iPhone.
Click to expand...
Click to collapse
As long as the apps you install are from known sources (i.e. Play Store) you don't need to worry. Also every time you download an app check the permissions. If you think that the app shouldn't have those permissions then don't download it. Finally for safety reasons never install any apps from unknown sources (i.e. outside of Play Store) unless you trust the developer.
If you still find yourself worrying read this.
applefag said:
Am I worrying too much ?
Click to expand...
Click to collapse
Yep
I think you won't install any app outside Google Play so install apps that you know and you won't need to worry. FYI http://en.wikipedia.org/wiki/Security-Enhanced_Linux
kalpetros said:
Also every time you download an app check the permissions. If you think that the app shouldn't have those permissions then don't download it.
Click to expand...
Click to collapse
Well only if you are sure. Sometimes apps need permissions that aren't justified for some people.
for the open nature of the android ecosystem, it is somewhat normal that you will have to be careful though there are several different techniques, i use this the most.
Root your phone, install xposed framework and install xprivacy. here is a review of what it does http://www.xda-developers.com/android/manage-individual-app-permissions-with-xprivacy/ . I know the installation pprocess may seem daunting, but it is easier than you think this module wil allow you to block apps of certain permission. IE. you can block location service for all the apps on your phone so that no app can get your location. There are bunch of other permissions that you can block like access to contact, gallery etc
My question to others is : Is antivirus application on android worth it? I mean can it protect me from real time attaks and malwares??
SaffatBokul said:
My question to others is : Is antivirus application on android worth it? I mean can it protect me from real time attaks and malwares??
Click to expand...
Click to collapse
Not useful IMO. FYI I remember this article.
User sensibility is your best defense. Don't install apps not from the market. Only install apps with a lot of positive comments.
I would advise again rooting your phone. It's true that there are ways to block apps from accessing your private data on a rooted phone, but the additional vulnerability from unlocking your bootloader and rooting is not worth it. Just stick to apps from major developers.
snapper.fishes said:
User sensibility is your best defense. Don't install apps not from the market. Only install apps with a lot of positive comments.
I would advise again rooting your phone. It's true that there are ways to block apps from accessing your private data on a rooted phone, but the additional vulnerability from unlocking your bootloader and rooting is not worth it. Just stick to apps from major developers.
Click to expand...
Click to collapse
I agree, rooting your phone comprimises your security even if you do it to install security apps.
Primokorn said:
Yep
I think you won't install any app outside Google Play so install apps that you know and you won't need to worry.
Click to expand...
Click to collapse
Unfortunately, new apps in Google Play are rarely verified by Google staff, so there is still always a possibility of trojan or other malware.

cyanogenmod security and google spyware?

What is different in security for cyanogenmod and normal android?
Is cyanogenmod has google spyware?
Thank you
arexium said:
What is different in security for cyanogenmod and normal android?
Is cyanogenmod has google spyware?
Thank you
Click to expand...
Click to collapse
No, cyanogenmod does not have google apps. For more info: http://wiki.cyanogenmod.org/w/Google_Apps
Even if they don't use google apps, they have their own spyware. For more how to secure your device see this: http://forum.xda-developers.com/general/security/tuto-how-to-secure-phone-t2960077
setmov said:
No, cyanogenmod does not have google apps. For more info: http://wiki.cyanogenmod.org/w/Google_Apps
Even if they don't use google apps, they have their own spyware. For more how to secure your device see this: http://forum.xda-developers.com/general/security/tuto-how-to-secure-phone-t2960077
Click to expand...
Click to collapse
This hard for apply and may be not work for my phone
You know easy way?
You thinks not use smart phone and also not use android better?
Only normal phone and for internet only use computer?
Different idea, if you have only text secure app on phone and cyanogenmod how they spy and see message?
Thank you
arexium said:
This hard for apply and may be not work for my phone
You know easy way?
You thinks not use smart phone and also not use android better?
Only normal phone and for internet only use computer?
Different idea, if you have only text secure app on phone and cyanogenmod how they spy and see message?
Thank you
Click to expand...
Click to collapse
I suggest you take a look here: http://forum.xda-developers.com/showthread.php?t=2550769
setmov said:
I suggest you take a look here: http://forum.xda-developers.com/showthread.php?t=2550769
Click to expand...
Click to collapse
This good, I check it
What you think this one please, Replicant OS?
arexium said:
This good, I check it
What you think this one please, Replicant OS?
Click to expand...
Click to collapse
What phone do you have?
setmov said:
What phone do you have?
Click to expand...
Click to collapse
This lenovo a5000
What you think Replicant OS, good one? I changes phone if this good one
arexium said:
This lenovo a5000
What you think Replicant OS, good one? I changes phone if this good one
Click to expand...
Click to collapse
Honestly I haven't tried it, so I don't know. But, what are you looking for? A secure rom, or just a rom without google apps?
setmov said:
Honestly I haven't tried it, so I don't know. But, what are you looking for? A secure rom, or just a rom without google apps?
Click to expand...
Click to collapse
Yes I want secure ROM even if not work on my phone, I can change phone
arexium said:
Yes I want secure ROM even if not work on my phone, I can change phone
Click to expand...
Click to collapse
Then, I suggest you to be patient. There will be some news soon.
try AFWall Donate version, XPrivacy, AppOps, MyAndroidTools Pro, ChatSecure, Orbot, Network Connections or Network Log App in playstore, override DNS app, SD Maid, Firefox browser...these are all good apps known for supporting end-user privacy or for strong root level management of your system. It really depends on what type of "secure" youre interested in. Android is relatively secure security-wise, but privacy-wise, not so much... actually in its default state, not at all, especially with google inside. Knowing your settings, and config, almost any ROM can be secure.
arexium said:
Yes I want secure ROM even if not work on my phone, I can change phone
Click to expand...
Click to collapse
If you are willing to switch to a Nexus 5 we (Graphite Software) have posted a ROM (Secure Spaces) that allows you to create a separate space (virtual phone) where you can easily configure the settings (enable and disable a number of attributes - bluetooth , networking, adb, etc). Also you can remove the Google Play apps in this personal or hidden space, but allow the owner space to still have Google Apps if you want. This new space is encrypted using ecryptfs and also has pid namespaces enabled in the kernel, plus some additional security features. You can push apps into this space to limit their access to the owner space , or you can think of this space as a private space where maybe you launch only a banking app for example.
ElwOOd_CbGp said:
try AFWall Donate version, XPrivacy, AppOps, MyAndroidTools Pro, ChatSecure, Orbot, Network Connections or Network Log App in playstore, override DNS app, SD Maid, Firefox browser...these are all good apps known for supporting end-user privacy or for strong root level management of your system. It really depends on what type of "secure" youre interested in. Android is relatively secure security-wise, but privacy-wise, not so much... actually in its default state, not at all, especially with google inside. Knowing your settings, and config, almost any ROM can be secure.
Click to expand...
Click to collapse
Sounds like a good start to helping secure my android, but how do you use the apps effectively?
Thanks
talkcc144 said:
Sounds like a good start to helping secure my android, but how do you use the apps effectively?
Thanks
Click to expand...
Click to collapse
All I can say is do what I did. Check them out. Read, follow instructions, experiment. Android may come shipped with some functionalities disabled but the capability is there...in a major way. You just have to take the time to learn. Familiarize yourself with settings, apps, services, device signals.

(Potential) Malware found on Elephone S3 right out of box?

Hi guys
I recently purchased a Elephone S3 from Everbuying.com. I heard people talking about how notorious these Chinese phones are having malware installed on them, so I decided to give the malware check a go and use about 10+ popular Malware detection apps (Avast, Kaspersky, Avira, Trojan Killer, you name it) currently available on Play Store.
Out of all those, excluding warnings that doesn't really matter in this regards (Malware specific), the below two apps gave me those respective warning results.
I have done some research, but i don't think I found any relevant info in this regards. So, for all the guru out there, the question is obvious, should I be worried about these "non-deletable" apps (if not rooted)? If they ARE malicious, can I be worried free by turning off ALL permissions for the apps and in some case, disable the app (I can disable the Beauty Center, not ELE Launcher).
Thanks to you all for any input!
Malwarebytes Anti-Malware
App - Beauty Center
Message - Android/PUP.Riskware.Cooee.a
App - ELE Launcher
Message - Android/PUP.Riskware.Cooee.H
Stubborn Trojan Killer
App - Beauty Center
Message - General Trojan
App - ELE Launcher
Message - General Trojan
bagachin said:
Hi guys
I recently purchased a Elephone S3 from Everbuying.com. I heard people talking about how notorious these Chinese phones are having malware installed on them, so I decided to give the malware check a go and use about 10+ popular Malware detection apps (Avast, Kaspersky, Avira, Trojan Killer, you name it) currently available on Play Store.
Out of all those, excluding warnings that doesn't really matter in this regards (Malware specific), the below two apps gave me those respective warning results.
I have done some research, but i don't think I found any relevant info in this regards. So, for all the guru out there, the question is obvious, should I be worried about these "non-deletable" apps (if not rooted)? If they ARE malicious, can I be worried free by turning off ALL permissions for the apps and in some case, disable the app (I can disable the Beauty Center, not ELE Launcher).
Thanks to you all for any input!
Malwarebytes Anti-Malware
App - Beauty Center
Message - Android/PUP.Riskware.Cooee.a
App - ELE Launcher
Message - Android/PUP.Riskware.Cooee.H
Stubborn Trojan Killer
App - Beauty Center
Message - General Trojan
App - ELE Launcher
Message - General Trojan
Click to expand...
Click to collapse
go ahead and disable Beauty Center, as far as ELE Launcher, that seems legit. But if you don't like it, just replace it with something like Nova Launcher.
mattzeller said:
go ahead and disable Beauty Center, as far as ELE Launcher, that seems legit. But if you don't like it, just replace it with something like Nova Launcher.
Click to expand...
Click to collapse
Hi mattzeller, thanks heaps for the info! This might not be a good question, but just for my information, generally speaking, is there a way to distinguish between a real harmful malware (actively stealing personal info) and an app that has more access and integration to the phone's OS than others by looking at the information provided? In other words, is there any obvious give away sign?
Thanks again for the help!
bagachin said:
Hi mattzeller, thanks heaps for the info! This might not be a good question, but just for my information, generally speaking, is there a way to distinguish between a real harmful malware (actively stealing personal info) and an app that has more access and integration to the phone's OS than others by looking at the information provided? In other words, is there any obvious give away sign?
Thanks again for the help!
Click to expand...
Click to collapse
Well look at reviews of the app, see if it is installing other apps without your consent, or constantly nagging you to download other apps. Generally 99.99% of apps on Google play are safe. Occasionally some crapware gets on there, but if you take a look at its rating and reviews (not just the highlights) you should be good.
Sent from my SCH-R220
bagachin said:
Hi mattzeller, thanks heaps for the info! This might not be a good question, but just for my information, generally speaking, is there a way to distinguish between a real harmful malware (actively stealing personal info) and an app that has more access and integration to the phone's OS than others by looking at the information provided? In other words, is there any obvious give away sign?
Thanks again for the help!
Click to expand...
Click to collapse
Always check the apps permissions. I absolutely refuse to install an app that has permissions that it shouldn't be using. However, if the app you're about to download needs permissions related to the app features, that's OK with me.
I see so many Play Store apps that are just total spyware in my book. Flashlight apps are a good example of this. There is zero reasons a flashlight app needs to read my contacts or a data connection. Just be mindful of reviews and permissions and you'll be OK.
KernelCorn said:
Always check the apps permissions. I absolutely refuse to install an app that has permissions that it shouldn't be using. However, if the app you're about to download needs permissions related to the app features, that's OK with me.
I see so many Play Store apps that are just total spyware in my book. Flashlight apps are a good example of this. There is zero reasons a flashlight app needs to read my contacts or a data connection. Just be mindful of reviews and permissions and you'll be OK.
Click to expand...
Click to collapse
I don't worry about apps with excessive permissions, I just revoke the permissions I don't like.
Sent from my SCH-R220
mattzeller said:
I don't worry about apps with excessive permissions, I just revoke the permissions I don't like.
Click to expand...
Click to collapse
That's the best way to do it.
I do the same thing, but I see lots of people posting here that aren't too tech savvy. For them be mindful of what you download.
mattzeller said:
Well look at reviews of the app, see if it is installing other apps without your consent, or constantly nagging you to download other apps. Generally 99.99% of apps on Google play are safe. Occasionally some crapware gets on there, but if you take a look at its rating and reviews (not just the highlights) you should be good.
Sent from my SCH-R220
Click to expand...
Click to collapse
Thanks for the advice. Yes, I am aware that common source/cause of malwares are side load apps and rooted device. So I am always fairly cautious about any apps i installed via non-play store source. However, these two caught apk are installed right out of box. That kinda annoys me. I don't jump on the bandwagon and say Chinese phones are infested with malwares and I believe a lot of the time people just over exaggerate and blow some minority out of proportion.
However, the truth is, this is the first Chinese phone I got and it came with two identified malwares. To be fair, it might not be particularly malicious, but it's enough to make me have second thought about my purchase....
KernelCorn said:
Always check the apps permissions. I absolutely refuse to install an app that has permissions that it shouldn't be using. However, if the app you're about to download needs permissions related to the app features, that's OK with me.
I see so many Play Store apps that are just total spyware in my book. Flashlight apps are a good example of this. There is zero reasons a flashlight app needs to read my contacts or a data connection. Just be mindful of reviews and permissions and you'll be OK.
Click to expand...
Click to collapse
Thanks for the comment! Yes, I am quite careful about the app I get to choose to install, but I have little control over these apps that come pre-installed on these chinese phone and got detected as "malwares"
mattzeller said:
I don't worry about apps with excessive permissions, I just revoke the permissions I don't like.
Sent from my SCH-R220
Click to expand...
Click to collapse
Yap, what I did for those two apps I mentioned are turning off all permissions access to them, disable app for the one I can and turn off background data access. Hopefully it will freeze them for good and stop them from playing naughty.
Just a question though, say I do all those above (e.g. switching off permission, force stopped etc), technically speaking, can a malware still be "active and do what they "meant" to do"? I meant after all, they are meant to do something "out of control" right?
bagachin said:
Yap, what I did for those two apps I mentioned are turning off all permissions access to them, disable app for the one I can and turn off background data access. Hopefully it will freeze them for good and stop them from playing naughty.
Just a question though, say I do all those above (e.g. switching off permission, force stopped etc), technically speaking, can a malware still be "active and do what they "meant" to do"? I meant after all, they are meant to do something "out of control" right?
Click to expand...
Click to collapse
No, if you revoke the permission to view your contacts, it is the system that is blocking the apps ability to view your contacts.
Though I think you are being a little paranoid.
Everyone freaks out out all the permissions apps require, when the app actually never uses most of the permissions it asks for, at least not in the way you think. You wouldn't think the launcher needs permissions to access your contacts, but it does. How else is it going to allow you to make a call, or display an incoming all, or missed call/text badges.
I mean take a look at the litany of permissions Nova Launcher and TeslaUnread require, yet we all know the app is not malware. As long as you install from legitimate sources, you will be fine. Like I said in my first post, disable the Beauty app, the other is the Launcher. If you don't like it, install a different one.
Sent from my SCH-R220
Who would you rather have snoop in on your calls? China, or USA.. Because it is one or the other.. me personally, I will take the country in which I do not reside...
mattzeller said:
No, if you revoke the permission to view your contacts, it is the system that is blocking the apps ability to view your contacts.
Though I think you are being a little paranoid.
Everyone freaks out out all the permissions apps require, when the app actually never uses most of the permissions it asks for, at least not in the way you think. You wouldn't think the launcher needs permissions to access your contacts, but it does. How else is it going to allow you to make a call, or display an incoming all, or missed call/text badges.
I mean take a look at the litany of permissions Nova Launcher and TeslaUnread require, yet we all know the app is not malware. As long as you install from legitimate sources, you will be fine. Like I said in my first post, disable the Beauty app, the other is the Launcher. If you don't like it, install a different one.
Sent from my SCH-R220
Click to expand...
Click to collapse
Unfortunately the way things are with the permissive Android system, we have to be a little paranoid. The built in system apps like launchers and permissions can't be disabled easily unless the user is technical enough to know about rooting using apps like xposed/xprivacy.

Categories

Resources