Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I want to reinstall the rom on my android device. I like to assume that the system is infected when I do a reinstallation of any device, so if it was really infected and I haven't noticed, I'm on the secure side.

I'm not very familiar with the android internals. What would be the steps somebody would have to do, after he had ran a malicious application and granted root privileges?

share|improve this question
Which ROM do you want to install? And what device do you have? – Tie-fighter Jul 17 '12 at 11:07
@Tie-fighter CyanogenMod-7 and Samsung Galaxy S2 – sfx Jul 17 '12 at 23:06
1. Is the phone rooted? 2. What type of device is it? 3. What if any cause for thinking there is malicious activity going on? – Keegan Black Jul 25 '12 at 18:38
1. Yes. 2. GT-I9100, but I think it would be better to keep this topic more generic. I hope this question is relevant for other users, too. 3. No. It's just for paranoia's sake. – sfx Jul 28 '12 at 22:57
up vote 4 down vote accepted

As always, everything depends on the nature of the attacker. How determined are they, what resources have they, are they targeting you specifically?

If your concern is regular, non-targeted malware, you should be OK if you keep a clean SD card with a custom recovery manager on it, and use that to flash the ROM. It's important that you use that card for nothing else, and never have it in the device unless you're booting from it.

This means you need a clean device at some point to create that clean SD card, and later to update the ROM.

If you are facing a targeted attack from a well resourced attacker, things get more serious, and you'll probably need to switch to a "burner phone" model, where you throw the phone in the trash every few days and buy a new one.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.