Phishing

If Norton provides an option to remove or quarantine the malware, proceed with that immediately. It’s designed to isolate the threat and protect your device.

First, it's probably best to not enter any more passwords in any apps until you've had your phone looked at. There are also a few things to check if you think you're victim of an overlay attack:

- Display Over Other Apps: Go to Settings --> Apps --> Special App Access --> Display over other apps. Look for any app you don't recognize or that shouldn't need this permission, like a game, cleaner app, etc.) Turn it OFF for anything suspicious.

- Accessibility Services: Go to Settings --> Accessibility. If you see an app in that section that you didn't personally authorize for a specific need, disable it immediately.

- Check Battery Usage: Phishing software runs constantly in the background to 'watch' your screen. This usually causes your phone to run hot or see battery drain faster than usual.

We recommend having our team take a look at your phone, either in person or by reaching out to our Mobility team, but if you suspect you've been compromised then this is the protocol:

- Turn on Airplane mode.

- Uninstall any recent apps or apps you don't normally use. Look especially for any 'free' apps or utilities such as flashlights, pdf converters. Try to remember if you've recently installed an app just before this started happening.

- The safest path of course is a factory reset. Before you do, make sure all important data and photos are backed up to a trusted cloud service, but do not restore 'system settings' if you do this, as that's where the malware might be.

- Update everything. Ensure your operating system is up to date with all the latest security patches.