My computer (probably) had malware, and during that time I connected my phone to it (via USB) for transferring files, using as midi, etc. Is there a chance the malware could've spread from the computer to my phone? I don't see any scam popups or unusual logins.

  • 2
    The answer of possibility is always yes in infosec. The probability of some possibilities can be unlikely.
    – defalt
    Aug 25, 2021 at 17:20
  • @defalt so should i format my phone? This was 3 months ish back. I connected it several times on different ocasions.
    – user261600
    Aug 26, 2021 at 11:09

1 Answer 1


It is possible but I would say it is rather unlikely that your phone was infected. By default USB debugging on Android is deactivated and that prevents most possibilities for an attacker to install apps/services on your phone since there is no adb command that can be used without active USB debugging. By default only file transfer from the computer to the phone is activated but that does not allow the installation of apps or other software on your phone. So you can check your SD card and internal storage for strange looking files but you will probably not find any.

  • i actually had usb debugging on i think. i think you need it for using a phone as a midi
    – user261600
    Aug 26, 2021 at 4:54
  • Yeah correct it isn't impossible. I edited my answer. With USB-Debugging on it's for sure possible
    – Me7e0r
    Aug 26, 2021 at 4:58
  • wait nvm you dont need it
    – user261600
    Aug 26, 2021 at 5:08
  • Btw i connected my phone to my computer several/many times on different occasions during the time i think i had malware. So am i still safe? I didnt think i had malware back then so thats why i connected.
    – user261600
    Aug 26, 2021 at 18:28
  • I would say it is more likely that an attacker would steal the data on your phone instead of infecting it over your pc. An attacker has basically three possibilities to install software on your phone: adb, google play console and exploiting. Adb is not possible without usb-debugging and the simplest way. For google play attackers would need to steal your credentials and they could then only install apps from the store which is likely to be detected. For exploiting you need to have a decent amount of knowledge but it is a possibility.
    – Me7e0r
    Aug 27, 2021 at 6:41

You must log in to answer this question.