TLDR InfoSec · STRATEGIES & TACTICS

THIS SNEAKY ANDROID SPYWARE NEEDS A PASSWORD TO UNINSTALL. HERE'S HOW TO REMOVE IT WITHOUT ONE

techcrunch.com6 min read

Summary from the TLDR InfoSec newsletter

Techcrunch has identified a new stalkerware app that requires a password to uninstall it. The app works by requiring the person who installs it to enable a built-in Android feature that allows for overlaying content, which allows the app to display the password prompt, which requires a password set by the person who installs it to dismiss whenever the user tries to uninstall it. Users can uninstall the app without a password by booting into safe mode. The app masquerades in the installed app list as a default Android app and also installs a device admin profile.