←back to thread

Taking over 60k spyware user accounts with SQL injection

(ericdaigle.ca)
229 points mtlynch | 2 comments | 03 Jul 25 14:56 UTC | HN request time: 0.553s | source
Show context
ryanrasti ◴[08 Jul 25 16:30 UTC] No.44501605[source]▶
> Q: Can I monitor a phone without them knowing?

> A: Yes, you can monitor a phone without them knowing with mobile phone monitoring software. The app is invisible and undetectable on the phone. It works in a hidden and stealth mode.

How is that even possible on a modern Android? I'd think one of the explicit goals of the security model would be to prevent this.

replies(2): >>44501617 #>>44504378 #
1. boznz ◴[08 Jul 25 21:50 UTC] No.44504378[source]▶
I think setting up your own evil-proxy or evil-wifi-hotspot and periodically connecting your phone to them may help in the detection of these and many other phone home malware. I am getting closer to the paranoia threshold to almost give it a try.
replies(1): >>44506581 #
2. lyu07282 ◴[09 Jul 25 05:26 UTC] No.44506581[source]▶
Then you would've seen some encrypted traffic to firebase which probably includes a bunch of legitimate apps on your phone too.