I have been using my android phone as a wifi hot spot for my laptop over the last few days so I can access the internet. I've been in a new location with no other personal devices nearby, and the hot spot has been on for extended hours over several days. I had WPA2 PSK security enabled for the hot spot.
Today I noticed that there was an extra device attached to the hot spot. I don't know when or how long they were connected. I turned the hot spot off and on again, and noticed that something connected again after some time. I changed my password to something much much stronger and the connection didn't appear again. As mentioned, I have WPA2 PSK enabled, but the password was not secure, probably brute-forcable from a list.
What could an attacker have done to my phone and laptop while they were connected to the hot spot? My phone runs a custom rom (Lineage) and the bootloader is unlocked. I wouldn't consider myself a target, although it is conceivable that I could be. Either way, the fact remains that someone cracked the password (I'll admit, it wasn't super secure to begin with) and connected for some reason.