As background, my business bank account was compromised. The compromise also involved call forwarding of a smartphone. So they got bank credentials and cell phone credentials.
I initially suspected key-loggers on compromised laptops, compromised networking equipment at home or office, or social engineering. But it finally dawned on me that my Android phone was another possible source for the breach.
Last night, using an Android network scanner, I scanned my home network and saw that my Droid Turbo had two services running, one for Port 4000 and I believe the other was Port 4500. Port 4000 was "Remote Anything slave" and a quick Google let me know that this gives a hacker complete control of my device. Other Android phones in the family did not have these services running. I quickly shut the phone down and am going to buy a new phone this morning.
My assumption at this point is that the phone hack allowed them to get my cell phone company passcode that allowed them to forward bank activation codes; the bank and phone company confirm this happened.
I guess my question is whether every computer and phone on my networks (business and home) are now likely to have malware? From the phone, can the malware go to the router and then go put malware on other devices. Is there likely to be malware on the router? I'm trying to understand what needs to be replaced. I should add that I don't recall going to the bank website on my cell phone but it's possible. I don't have the bank app but I might have logged in on the train ride home to do something.
Any and all advice is appreciated. Surprisingly, the bank, the cell phone company and Google don't seem all that interested in investigating, so I guess I am on my own.