My son somehow got a malicious app installed on his phone that did stuff like this. It was actually hidden somehow so it didn't show up as an installed or running app using the normal ways you'd see them, but I was able to track it down by using some tools that I'd already had on that phone. There is an app called "Hidden Apps" (which is not what I used; I actually don't remember how I spotted this problem) that is meant to show you these apps and might be worth trying if you don't see anything obvious.