Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

I want to reinstall the rom on my android device. I like to assume that the system is infected when I do a reinstallation of any device, so if it was really infected and I haven't noticed, I'm on the secure side.

I'm not very familiar with the android internals. What would be the steps somebody would have to do, after he had ran a malicious application and granted root privileges?

share|improve this question
    
Which ROM do you want to install? And what device do you have? –  Tie-fighter Jul 17 '12 at 11:07
    
@Tie-fighter CyanogenMod-7 and Samsung Galaxy S2 –  sfx Jul 17 '12 at 23:06
    
1. Is the phone rooted? 2. What type of device is it? 3. What if any cause for thinking there is malicious activity going on? –  Keegan Black Jul 25 '12 at 18:38
    
1. Yes. 2. GT-I9100, but I think it would be better to keep this topic more generic. I hope this question is relevant for other users, too. 3. No. It's just for paranoia's sake. –  sfx Jul 28 '12 at 22:57
add comment

1 Answer

up vote 4 down vote accepted
+25

As always, everything depends on the nature of the attacker. How determined are they, what resources have they, are they targeting you specifically?

If your concern is regular, non-targeted malware, you should be OK if you keep a clean SD card with a custom recovery manager on it, and use that to flash the ROM. It's important that you use that card for nothing else, and never have it in the device unless you're booting from it.

This means you need a clean device at some point to create that clean SD card, and later to update the ROM.

If you are facing a targeted attack from a well resourced attacker, things get more serious, and you'll probably need to switch to a "burner phone" model, where you throw the phone in the trash every few days and buy a new one.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.