On My Phone Hacking Possibilities

There can be a malware. This malware may be sending and receiving data. It must be listening on some port. But how was the malware installed? This problem happens with every new phone. It must be a backdoor or bug in android which allows one to connect remotely with root access and issue kernel level commands.

Maybe I cant detect it using antivirus because of signature issues. Or maybe a rootkit has been installed which prevents the malware detection. A bug or backdoor in android can anyways not be detected. But they must be using some port to communicate and it should be captured in netstat. What if you drop the connection when I run netstat? It won't be captured. I will have to check log files. But they won't leave a trail. They must have removed logging options. I can probably terminate any remote connections not initiated by me (how to identify?).

The simplest solution is to keep closing any open ports (apart from few known apps) on a regular basis and asking for authorization for any traffic coming from outside i.e. kind of firewall. Remove any privilege escalation option to sensitive APIs. Another option is to disable wifi cards. Hacking days are over my friends.

The network hacking part can be due to switching or changing something.