Hi everyone!

I installed grapheneos on a pixel 5. It was for a friend...

She tell me that when she send text message, the texting app (aosp) send also a publicity after her message.
It happen 4-5 time. So it not always when she send message...
The receiver don't see it. It's the only app that those so..

Why it is not removing when she reboot her phone... Is that bad?
And is this possible to remove that infection whitout resseting the phone? Or do she need to re-install an os to get rid of it?
We didn't make a move for now, like resetting the app to default. Can't remove, it a pre-install app.. She is very busy for now. That's why i am asking for advice before doing things!

The only things she made that was suspicious, was to go watch nude picture from a lgbtq+ porn site. No download..
So probably, it some kind of malware injected from this site?

I know it not very specific.. sorry... But i never see things like this before and it pick my curiosity up ;)

Thank to all!

  • yore replied to this.
    • Edited

    Hi @mascarade, welcome to the forum!

    mascarade She tell me that when she send text message, the texting app (aosp) send also a publicity after her message.

    I'm not sure what's happening here. Can you clarify?

    mascarade Why it is not removing when she reboot her phone... Is that bad?

    We have to know if there is malware in the first place. I am aware that the default SMS messenger from AOSP sends a duplicate message which only appears on the client side of the sender. If that is the case, then this isn't malware but I believe a bug from the AOSP app.

      yore

      yore I'm not sure what's happening here. Can you clarify?

      Well, maybe is that you point at..

      yore the default SMS messenger from AOSP sends a duplicate message which only appears on the client side of the sender.

      Because it append only on the client side.... Exept it not a duplicate message, it a publicity to buy something... An image whit a specification of that product.

      she have the "bubble" for her message to me and another "bubble" come right after to make a publicity offer...
      It is not point at somebody in her contact list, it can be different poeple, but it's not happening all the time...

        • Edited

        mascarade Exept it not a duplicate message, it a publicity to buy something... An image whit a specification of that product.

        If I'm not mistaken, she is getting unwanted ads?

        With me, it's when I send a message in a group chat that I get a separate message (the one I sent) to myself but the number is my own.

          yore If I'm not mistaken, she is getting unwanted ads?

          yes!

          For what i know, i don't think ads can be added to a texting app, whitout conscent or even whit conscent...
          I never see that...

          i am trying to get a screenshot...

            mascarade

            Could you check for accessibility services permission in the settings?

            • Edited

            mascarade i am trying to get a screenshot...

            That would be very helpful.

            I wonder if it's possible the carrier may be sending these messages? Or perhaps they're spam texts.

              yore I wonder if it's possible the carrier may be sending these messages?

              Sounds like that to me. There does exist "cheap/free" ad-financed mobile subscription plans, maybe that is what she got? I mean, if the phone was infected by adware, why are they not sending it to the recipients too?

              Could be useful to know what carrier she has.

              May be worth taking a look at the various settings under Access point names. Make sure there is not somehow something unusual set in there.

                yore I wonder if it's possible the carrier may be sending these messages?

                That a good point!

                The carrier is a cheap one. fizz.ca
                i am gonna read about them.
                2 years ago i was whit them and never see that publicity happen, but maybe they change their financial perspective....

                Carlos-Anso May be worth taking a look at the various settings under Access point names

                Good idea, i am gonna check her settings!