[General Questions and Answers] JesseJamez55:
Hello,

Thanks for taking some time to read this. Let me start off by mentioning that this all originated on my PC I believe and an unauthorized user obtained access to my network and therefore all my devices.

My OnePlus 7 Pro was what seriously concerned me as not only was it infected, the attacker actually pushed a firmware update to my phone and it randomly reset as I was using it into a completely different/custom rom that he of course had complete control over.

I upgraded to a OnePlus 8T and after walking out of the T-Mobile store I found out my new phone was already infected.... How? Well, the escalated priviliges this attacker had allowed him to auto connect to my OnePlus device using the OnePlus SmartSwitch app. Yeah, I thought it was crazy too.

So I've tried to hard reset my devices, which actually turned out to be a bad idea as this infection actually hijacked the the process by (I'm not super familiar with reading all the log data) but it was clear that multiple main processes were killed and it took control and a warning popped up saying (WARNING! This is a Debug Kernel and is not fit for a standard ROM. If you did not authorize this then your privacy may be at risk as this could potentially allow an unauthorized user complete control of your device" it was something along these lines, may not be the exsct wording but you get my point. (This was on my Samsung Galaxy Tab S7+)

More or less the same thing with my OnePlus 8T and it has complete control over all of my apps. The permissions my apps have are literally insane. I've attached screenshiots.

How can I mitigate this? What should I do? It has infected my 2017 MacBook Air, PC, OnePlus 8T, Samsung Galaxy Tab S7+, Asus ROG Rapture GT-AX11000 Router, Netgear Nighthawk Router and possibly more. This thing is crazy advanced to the point I didn't even know malware like this existed.

ALSO: I found out that Busy Box is installed on my devices without my authorization BUT my device isn't rooted.

[Samsung Galaxy Tab S7+]

|One UI Version|

2.5

|Android Version|

10

|Baseband Version|

T978USQS1ATJ5

|Kernel Version|

4.19.81-19543082

#2 Sun Oct 11 17:18:26 KST 2020

|Build Number|

QP1A.190711.020.T978USQS1ATJ5

|SE for Android Status|

Enforcing

SEPF_SM-T978U_10_0020

Sun Oct 11 16:58:25 2020

|Knox Version|

Knox 3.6

Knox API level 32

TIMA 4.1.0

DualDAR 1.2.0

HDM 2.0 - F

|Service Provider SW ver.|

SAOMC_SM-T978U_OYN_TMB_QQ_0026

R52N810TWJM

TMB/TMB/TMB

|Carrier Configuration Version|

2.340001

|Security Software Version|

MDF v3.1 Release 5

WLAN v1.0 Release 2

VPN PP-MOD v2.1 Release 3.0.1

ASKS v3.1 Release 20200806

ADP v3.0 Release 20191001

FIPS BoringSSL v1.4

FIPS SKC v2.1

FIPS SCrypto v2.5

SMR Oct-2020 Release 1

|Android Security Patch Level|

October 1, 2020

[T-Mobile | OnePlus 8T]

|Model|

KB2007

|Android Version|

11

|Carrier Configuartion Version|

2.360001

|Baseband Version|

MPSS.HI.2.0.c4-00028-SDX55_RMTEFS_PACK-1.327103.53

|Kernel Version|

4.19.110-perf+

#1 Wed Dec 16 22:01:42 CST 2020

|Software Version|

11.0.6.8.KB09CB

|Android Security Update|

November 1, 2020

View attachment 5192733View attachment 5192735View attachment 5192737View attachment 5192739View attachment 5192741View attachment 5192743View attachment 5192745View attachment 5192747View attachment 5192749View attachment 5192751