[Android Central Question]

I know my phone has been hacked and it was done by allowing developer mode and my imei.
Pop

[mustang7757]

Hi Pop , which phone ?

I'll leave a link to register so you can communicate here, as a guest account u cant .
https://forums.androidcentral.com/sh...d.php?t=413366

[B. Diddy]

Welcome to Android Central! How do you know it was hacked? The system app you mention is normal. Ericsson is a well-known name in telecom (they used to be merged with Sony). See this thread: https://forums.androidcentral.com/as...-activity.html. Ericsson SDS means Service Development Studio: https://www.oracle.com/technical-res...ip-server.html

[Rukbat]

com.sec.vsim.ericcsonnsds.webapp is Ericsonn's security program for the vSIM for SDS webapps. (Program names are read right to left. It's a normal Ericsonn program.)

[Coffeevixen]

I've been looking every where for information on this. Not just the app, but I've had the same thing happen to my phone since April of 2019 (at least that's when I caught on). I've gotten several new phones since then and they're all fine at first, then some how they get hacked. I'm assuming it's someone close to me.
I finally noticed after waking up one morning, when I got a developer warning/notification that said "An SD card was inserted with write permissions". Sure enough, I found an SD card in my phone that I didn't put in there. I assume it happened while I was sleeping.
Then I took it to Tmobile and they showed me my developer options had been turned on (I didn't turn it on as I'd have no reason to do so). And when I accidentally tried unlocking my network while trying to figure out what was going on, I had to call Tmobile to fix it and they needed my IMEI in order to do so. I gave it to them and they told me that there was 2 IMEI numbers registered to my phone. I have an s10+ and it's a single sim. So there should only be one IMEI registered to it. Tmobile even said it's strange and they've never seen that before, but also pointed out that my data skyrocketed to over 100GB a month around the same time this started.
A Microsoft office account keeps randomly appearing on my phone even though I constantly remove it and don't use Microsoft. When I try to disable certain apps, it tells me to deactivate admin. But there's no device admin apps on my phone.

I'm starting to think someone linked a fake IMEI to my phone and registered it in knox enrollment/enterprise as an employee phone in order to have access to and control what I'm able to do.

Have you found any other info on this yet or have you also experienced this? I'm sorry I couldn't be of more help with your question, but I hope some of the information I provided helps you get closer to figuring it all out.

[frederickdawg]

Try posting a screen shot of your s10 software version details.

I've been looking every where for information on this. Not just the app, but I've had the same thing happen to my phone since April of 2019 (at least that's when I caught on). I've gotten several new phones since then and they're all fine at first, then some how they get hacked. I'm assuming it's someone close to me.
I finally noticed after waking up one morning, when I got a developer warning/notification that said "An SD card was inserted with write permissions". Sure enough, I found an SD card in my phone that I didn't put in there. I assume it happened while I was sleeping.
Then I took it to Tmobile and they showed me my developer options had been turned on (I didn't turn it on as I'd have no reason to do so). And when I accidentally tried unlocking my network while trying to figure out what was going on, I had to call Tmobile to fix it and they needed my IMEI in order to do so. I gave it to them and they told me that there was 2 IMEI numbers registered to my phone. I have an s10+ and it's a single sim. So there should only be one IMEI registered to it. Tmobile even said it's strange and they've never seen that before, but also pointed out that my data skyrocketed to over 100GB a month around the same time this started.
A Microsoft office account keeps randomly appearing on my phone even though I constantly remove it and don't use Microsoft. When I try to disable certain apps, it tells me to deactivate admin. But there's no device admin apps on my phone.

I'm starting to think someone linked a fake IMEI to my phone and registered it in knox enrollment/enterprise as an employee phone in order to have access to and control what I'm able to do.

Have you found any other info on this yet or have you also experienced this? I'm sorry I couldn't be of more help with your question, but I hope some of the information I provided helps you get closer to figuring it all out.

[B. Diddy]

Welcome to Android Central! Where did you get your phone from in the first place? Was it brand new from Samsung? Or did you order it from some marketplace?

[Coffeevixen]

Here is a screenshot of my software information. And idk if this helps any, but I found an app that's shown as a "system app" called Personal Home. When looking at it with APK Analyzer the package name is com.samsung.android.knox.containercore.
Some of the permissions seem odd, well a lot of my "system apps" have these permission to "MANAGE_USERS" and "INTERACT_ACROSS_ALL_USERS" along with "KLMS_AGENT". And I haven't rooted my phone (idk if someone else did without my permission).
And maybe these things are all normal and I might just be looking too much into it. But I know there's definitely something up with the rest of the things I mentioned above. And with knox enrollment. If I use Google play on a browser, it thinks my android version is 8.0. But only on browsers. And as you can see from the screenshot, my android version is 10.
Thank you so much for all your help. I really appreciate it.

[Coffeevixen]

I purchased my S10+ straight from Tmobile brand new. Thank you for helping me try to figure this out. It's been really frustrating, especially because when that SD card was inserted, I lost all of my data and accounts, almost like my entire phone was reset or the system was overwritten. So I really appreciate you helping me sort this out.

[mustang7757]

Hi welcome to AC!

By your screen shot, and system app you mentioned looks good so far . Knox is Samsung security built in the Os and it will ask for many permissions,

Look in settings >about phone >status >it says official? If yes means OS hadn't been altered.

[Coffeevixen]

Thank you so much! I've been looking for a way to figure that out. thank you!

[mustang7757]

Thank you so much! I've been looking for a way to figure that out. thank you!

Your welcome!

[anon(10722480)]

I've been looking every where for information on this. Not just the app, but I've had the same thing happen to my phone since April of 2019 (at least that's when I caught on). I've gotten several new phones since then and they're all fine at first, then some how they get hacked. I'm assuming it's someone close to me.
I finally noticed after waking up one morning, when I got a developer warning/notification that said "An SD card was inserted with write permissions". Sure enough, I found an SD card in my phone that I didn't put in there. I assume it happened while I was sleeping.
Then I took it to Tmobile and they showed me my developer options had been turned on (I didn't turn it on as I'd have no reason to do so). And when I accidentally tried unlocking my network while trying to figure out what was going on, I had to call Tmobile to fix it and they needed my IMEI in order to do so. I gave it to them and they told me that there was 2 IMEI numbers registered to my phone. I have an s10+ and it's a single sim. So there should only be one IMEI registered to it. Tmobile even said it's strange and they've never seen that before, but also pointed out that my data skyrocketed to over 100GB a month around the same time this started.
A Microsoft office account keeps randomly appearing on my phone even though I constantly remove it and don't use Microsoft. When I try to disable certain apps, it tells me to deactivate admin. But there's no device admin apps on my phone.

I'm starting to think someone linked a fake IMEI to my phone and registered it in knox enrollment/enterprise as an employee phone in order to have access to and control what I'm able to do.

Have you found any other info on this yet or have you also experienced this? I'm sorry I couldn't be of more help with your question, but I hope some of the information I provided helps you get closer to figuring it all out.

I'm having the same problem with my phone. Did you ever get it figured out.