{"id":5091,"date":"2020-05-27T07:00:00","date_gmt":"2020-05-27T11:00:00","guid":{"rendered":"https:\/\/langa.com\/?p=5091"},"modified":"2020-05-27T07:38:03","modified_gmt":"2020-05-27T11:38:03","slug":"how-does-some-malware-manage-to-survive-a-smartphone-factory-restore","status":"publish","type":"post","link":"https:\/\/langa.com\/index.php\/2020\/05\/27\/how-does-some-malware-manage-to-survive-a-smartphone-factory-restore\/","title":{"rendered":"“How does some malware manage to survive a smartphone factory restore?”"},"content":{"rendered":"\n

(Answer requested by Lilly Vugheen)<\/small><\/em><\/p>\n\n\n\n

Android smartphones keep a spare copy of the operating system on hand, stored in protected files. These files are what’s used to rebuild the system after a factory reset, or a root.<\/p>\n\n\n\n

Rare but virulent Android “xHelper” malware can break into and alter the protected files. So, when you reset the phone, it rebuilds itself with hooks for malware already in place.<\/p>\n\n\n\n

However, this is rare, and requires a narrow and unusual set of circumstances to pertain before it can happen; usually including the phone’s owner deliberately sideloading unverified third-party software — a known and easily-avoided infection vector.<\/p>\n\n\n\n

More info:<\/strong><\/p>\n\n\n\n