Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Have there been any instances of malware or spyware packaged in custom ROMs, for example a malicious email app pre-installed that records your server IMAP username and password and forwards it to a 3rd part? Or part of the kernel that takes periodic photos? With regard to custom ROMs, I mean official and unofficial releases such as Cyanogenmod, AOKP, LiquidSmooth, etc.

share|improve this question
It's at least very possible, but I can't confirm this so far. – Lucas Kauffman Oct 15 '13 at 6:05
Do OEM ROMs with Carrier IQ count? Not intended as malware originally (it was meant to collect usage statistics and debugging data, and not to send any private or identifying data off the device), but it ended up exposing a lot on some devices. – Gilles Oct 16 '13 at 18:07
I have since discovered all ROMs have malware because NSA. – Chloe Jan 3 '14 at 19:44
up vote 4 down vote accepted

Not in any of the popular ones as far as I've heard. But you're free to build one yourself, which would then mean that it has happened.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.