This is my first question on this forum so please let me know if I need to clarify anything.

My Android 10 Pixel 2 just downloaded 2 files without my permission today, both named something to the effect of "Coronovirus+Vaccine+Phase1+Consent+Form.pdf". Obviously suspicious, especially in these times.

I deleted the PDFs without opening them and then scanned for malware on my phone with both Avast and Norton. No malware was found.

I also removed storage permissions for almost everything except for a small handful of apps that need to access storage to function properly.

Prior to this, I've been using 2fa on the google account that is attached to the phone - I even just switched to a physical key as an additional precaution.

My antivirus software found malware on one of my phone apps about 2 days ago, and I deleted that app then (a rescan showed no malware), but that doesn't explain how the suspicious behavior that happened today is possible.

A note on this app - there don't seem to be any Play Store reviews that complain about malware except for 1 that said that it was downloading updates to itself without permission.

How could these PDFs have been downloaded without my permission, and what further measures can I take to protect myself?

Many thanks!

  • Welcome to the site! Without knowing exactly what happened, it's a little hard to answer this. Here's a guess: did you browse to any websites today? – multithr3at3d Mar 31 '20 at 21:43
  • Thanks! Not directly through a browser such as Chrome or Firefox, but I did read various news/web pages over Flipboard (which is like a news aggregator) and maybe there was some kind of malicious code in something that I looked at. Funny thing though - when I looked at the download timestamps, it became apparent that I wasn't using my phone when the PDFs were downloaded. – jimothy Mar 31 '20 at 22:48

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.