Hello everyone,
I am looking for an objective cybersecurity opinion regarding an incident that has been causing me a lot of anxiety.
Device:
Vivo Y20G
Android 11
Android security update: March 2022
Google Play system update: November 2022
My concern: On 7 July, I recorded a private video and later deleted it. Since then, I have been worried that my phone might have been hacked and that the video could have been uploaded without my knowledge.
I have tried to investigate this as objectively as possible. Here are the facts:
Google Play Protect found no harmful apps when I scanned about 2 days later.
Vivo iManager security scan about 10 days later did not detect malware (it only reported that one malicious URL had been blocked).
Root Checker reports that the phone is not rooted.
I found no suspicious installed apps.
I found no suspicious Google account activity.
I checked Chrome downloads, Play Store downloads, and My Files and found nothing suspicious.
GlassWire showed only relatively small upload amounts during the time period I am concerned about (around a few tens of MB, not hundreds of MB). The video itself would have been approximately 200–250 MB.
I did not notice unusual battery drain, overheating, pop-ups, crashes, or other obvious signs of compromise.
The only uncertainty is that I cannot remember with complete certainty whether I permanently deleted the video myself by turning off the "Recently Deleted" option in Vivo's Album app.
My question is:
Based only on these facts, and not on hypothetical possibilities, what is the most likely explanation? Does this evidence suggest a realistic compromise of the phone, or is there insufficient evidence to conclude that the phone was hacked?
Thank you for taking the time to read this.
I am looking for an objective cybersecurity opinion regarding an incident that has been causing me a lot of anxiety.
Device:
Vivo Y20G
Android 11
Android security update: March 2022
Google Play system update: November 2022
My concern: On 7 July, I recorded a private video and later deleted it. Since then, I have been worried that my phone might have been hacked and that the video could have been uploaded without my knowledge.
I have tried to investigate this as objectively as possible. Here are the facts:
Google Play Protect found no harmful apps when I scanned about 2 days later.
Vivo iManager security scan about 10 days later did not detect malware (it only reported that one malicious URL had been blocked).
Root Checker reports that the phone is not rooted.
I found no suspicious installed apps.
I found no suspicious Google account activity.
I checked Chrome downloads, Play Store downloads, and My Files and found nothing suspicious.
GlassWire showed only relatively small upload amounts during the time period I am concerned about (around a few tens of MB, not hundreds of MB). The video itself would have been approximately 200–250 MB.
I did not notice unusual battery drain, overheating, pop-ups, crashes, or other obvious signs of compromise.
The only uncertainty is that I cannot remember with complete certainty whether I permanently deleted the video myself by turning off the "Recently Deleted" option in Vivo's Album app.
My question is:
Based only on these facts, and not on hypothetical possibilities, what is the most likely explanation? Does this evidence suggest a realistic compromise of the phone, or is there insufficient evidence to conclude that the phone was hacked?
Thank you for taking the time to read this.
