yashsingh1/xdaforums huggingface dataset:
[General Questions and Answers] blackhawk:
A nice Russian girl🤣

Rather sloppy not to keep backups and to wait even a day to purge that rootkit.

You could have other infected files on there now as well. Put it on a flash stick. Alternatively upload to cloud.

It needs to be scanned and even then there's malware that might evade detection. It could infect the PC as well if there's more hidden wuv packages. Malware jpegs are a terror, both Windows and Adroids are vulnerable to them... it only takes one. If present it/they must be deleted... thousands of images you say.

Oh my.

Reset all your passwords after the reload.
[General Questions and Answers] Deleted member 1890170:
THIS IS DUPLICATE TO THIS THREAD:

https://xdaforums.com/t/my-huawei-p...h-a-rat-can-i-still-save-my-accounts.4294257/
[General Questions and Answers] blackhawk:
LMAO, I'd been reloaded by now🤣
[General Questions and Answers] Columbus93:
OK SIR, you can delete that one thread because at the time I lacked many informations that I gathered only now. Please delete that one, NOT this one.
[General Questions and Answers] Columbus93:
LMAO, I can't reload until I know for sure how to save my photos, videos and contacts! I also work with my Whatsapp and Gmail profiles!
[General Questions and Answers] Columbus93:
I made a scan of all the content on the hacked phone with 1) Kaspersky full version and then 2) Panda security dome full version but nothing was found. Then I exported all my photo albums and videos with a usb cable on my PC, and repeated a scan on it with Panda dome. Nothing was found again. No weird jpegs were ever sent to me. Only that damn video which asked to download a fake flash plugin on my Huawei.

What if I finally transfer all this stuff into an APPLE IPHONE? will it be compromised too?
[General Questions and Answers] blackhawk:
Ideally you would have wiped everything on the phone and restored from known good backups.

iPhones are not impervious to malware.

Depends how resourceful and determined your hacker is. All that social media crap will be your undoing. You're wide open and an easy target.
[General Questions and Answers] blackhawk:
Depending on what's been loaded the hacker could do all kinds of nasty stuff.

You're going to be enchanted if the reload gets infected too... the more time you wait, the more potential for greater damage.

We're just strangers on the internet... do you see a pattern here?

I do.
[General Questions and Answers] Columbus93:
my hacker just want to do me wrong and give me a hard time with insults, humiliations etc because she is a stalker psychopath who has been refused by me.

So, you are suggesting me to lose all my social media and more than 10.000 photos because a stalker psychopath decided to do so? No defence, no strategy against such a threath? I knwo social media is basically ****, but the sole idea to let this psychopath win because she decided so is unaccettable for me.
[General Questions and Answers] Columbus93:
Dude I understand, but WHAT can I do? Delete everything while not even trying a backup? yesterday I even saw some strange notification about my phone having just been being link to google Chromcast.. beside I was at work, and never had Chromcast installed and nobody has in my house ! I just want to save my 10 thousands pictures before to thrash my phone!
[General Questions and Answers] blackhawk:
Do what you want... dude.

You screwed up by not backing anything up for how long? Ever?

So save the data and hope for the best.

I have over a dozen hdds I use for backup in different locations. My phone SD card is redundantly backed up with 3+ copies on different hdds. All are offline.

The time to do something was before this happened... first mistake.

Second mistake, still using the device with known malware on it.

If found something like that on my phone this morning by now it either be gone or the phone be reloaded.
[General Questions and Answers] Columbus93:
I know that I screwed up by never backing anything up.. hard lesson learned. But it's like a month and nobody, not even professionals, could tell me how to safely backup my stuff before to wipe everyhting out! This hacker is owning my phone by such a long time before I could understand what had happened that she literally had time to backup herself ALL my stuff, even the smallest details in my life! I even had to block my bank accounts!!! Anything worse than that?

All the worse already happened, that's the problem. And considering that, I feel like I have nothing to lose anymore, so I just want to pick all my personal stuff or at least my accounts and savely bring them into another phone, that I just bought. An iphone 12. But looks like a complicated math equation to export stuff from a hacked phone into another phone!

What If I reboot this hacked phone with safe mode, and I transfer all my stuff and files in this mode? No trojan should be active in safe mode, isn't it?
[General Questions and Answers] blackhawk:
I already told you, a flash drive... I would use two and make 2 backup copies.

Confirm the data is complete and readable on the flash drive(s) before wiping phone.

See what happens on the new load before and after the old data is reloaded.

A month? Jeeeesze... stop screwing around.
[General Questions and Answers] Deleted member 1890170:
@Columbus93

Pulling data of interest only is possible if

Phone's Android's USB-service mode is set to adb,mtp

Phone is OTG capable and/or phone's Android is ADB enabled
[General Questions and Answers] Columbus93:
I have no idea how to do that

I'm sorry but I have no idea how to even control if these options are enabled. I just enabled developer options and entered developer menu but I don't know how to check these options.
[General Questions and Answers] James_Watson:
Some steps for your reference.

1. Make sure that your Windows PC has both the latest Windows updates and a strong enough security software installed.

2. Connect the P30 to your PC in order to make a full data backup.

3. Reset your P30( Factory Reset + Wipe Cache Partition ).

4. Reset the passwords of your social network apps ASAP.

5. For the data backed up from the mobile phone, or even the entire Windows PC, run a full security scan.
[General Questions and Answers] Kenora_I:
Huaweis hisilicon chips have huge root security issues xd.

Lmao maybe one of the zero day exploits imparted in this? Who knows
[General Questions and Answers] Deleted member 1890170:
For HUAWEI devices the HiSuite utility exists with which you can transfer files from phone to computer.

All you have to do is to activate on phone USB Debugging and additionally turn on HDB.
[General Questions and Answers] Columbus93:
Thank you sir, you're precious. You're all being precious. One redundant question since I'm passing from my Huawei hacked phone to a brand new apple Iphone 12. At first boot time, It asks me the possibility to export selected datas from a PC or Android phone, by using an app called "switch to iOS". Can I also do that or is it better doing the whole manual thing we're talking about, avoiding such "in app" data transfers?
[General Questions and Answers] Columbus93:
I recall that somebody told me that I had to "stop USB debugging if it's on", as a way to deactivate this trojan/malaware.. But now you are telling me to switch it ON (P30 has it switched on by default)..

How is it? What is this USB debugging option about? Maybe I have to switch it on for USB file transfer and switch it off when disconnected?
[General Questions and Answers] :
As I can see you have little or no idea what ADB ( read: USB debugging ) is, how it works. My recommendation: become familiar with ADB.

How to install ADB on Windows, macOS, and Linux

If you're on Windows, Linux or macOS, you can follow these step by step instructions to install ADB on your desktop or laptop PC.

www.xda-developers.com
[General Questions and Answers] Columbus93:
Please try to understand me: I'm a medical doctor who is trying to save what still remains of his private life and his patients informations from this monster. I'm only asking for help given that nobody around me seems to have a clue about what happened.

Anyway I've read your ADB info page, and I roughly understood what ADB/USB debugging stands for: now I'm able to activate Developer options and enable or disable USB debugging options.

But I don't understand why did you tell me to activate my phone USB Debugging together with HDB connection, which makes a lot of sense, but then another user from this forum, @Fytdyh, told me " to disable every administrator of your phone, stop usb debugging if it's on, start uninstalling apps" which sounds quite like the opposite to me.

Final edit: I'm trying really hard to enable "USB debugging" but as soon as I activate it and then exit the menu, it keeps deactivating.. any other developer option is being saved BUT not that one, and I don't know why.
[General Questions and Answers] :
HDB is a more or less restricted ADB: HDB's main purpose is to transfer files, whereas ADB's main purpose is to adminster the phone connected to - transferring files or parts of Android's internal storage memory included.

It is up to you which tool you want to use.

On my Huawei I always have enabled both the ADB and the HDB. And, it's really not interesting me what other people advise.
[General Questions and Answers] Columbus93:
Definitely agree with you, I want to follow your advices. But as I wrote in the final edit of my last post, something funny is happening when I try to enable USB debugging from developer options: as soon as I exit that menu, USB debugging option gets disabled again. Every other option is saved, but not that one. Why??
[General Questions and Answers] DiamondPlus:
Have you tried scanning with Malwarebytes? Also once you're done backing up your stuff.... try finding any suspicious background app/service using apps that analyze and log all cpu activity (just google how to check all background apps) Finally, maybe if you sent a specialist that infectious link, maybe they can help you find out more about its nature.
[General Questions and Answers] Columbus93:
I scanned my phone with wathever comes in mind.. Malwarebytes, Avast, Kaspersky, Comodo antivirus, trojan scanner.. nothing was found. Whatever it is, it's something smart.
[General Questions and Answers] blackhawk:
There's no definition for it or it hides well.

That's real bad news for you.

That phone is a liability and should not by online.

Backup and reload now... the longer you screw around, the more potential damage it can do.

Don't restore data until all passwords are reset.

Don't load the trash apps.

See if you were successful in purging it then add your data. If it comes back it's likely hiding in your data too... it may take a long time to trigger it if so. Be careful what you download🤣

If you're running a pre-Pie OS a firmware reflash maybe needed to purge it.
[General Questions and Answers] Columbus93:
That's why I am taking so much time.. This thing is so smart that it only takes one false step to screw everything again, on multiple devices.. So I want to be careful in saving my stuff, there's a LOT of sensitive datas and I basically work with them.

Also I keep receiving conflicting advices: @jwoegerbauer tells me do enable USB debugging option, and I agree with him (but as soon as I enable this option, it gets disabled automatically and I can't understand why) while @Fytdyh suggest me the opposite, to disable it. This is so confusing!

My OS is Android 10, EMUI 11.0.0.
[General Questions and Answers] blackhawk:
My device be reloaded in less than a day.

Time is the hacker's ally... not yours.

Why didn't use a flash stick to download the data as I suggested? This isn't rocket science.
[General Questions and Answers] Kenora_I:
You can do the switch to iOS if you want, probably simpler.

It does it automatically from what I've heard.
[General Questions and Answers] Columbus93:
Ok dude, one last question because I see you very practical and tacision-taking.

You say that time's hacker's ally, but I had this monster in my phone at least for 3 months before I could even understand what was happening.

That's why I'm asking you, beside stealing all my pictures, datas and x-scan everything in my private life, what can even go worse? What's the worst thing she can do now that she already did all the worst?

I feel like I'm running in a competition that I already lost months ago, that's why I'm taking my time to flash everything.

Final question: can I just transfer my most important datas into an apple Iphone, which has a different operative system?
[General Questions and Answers] Columbus93:
Yes but my question was: can I export my photo albums plus my contacts from this hacked Huawei Phone to my new Apple Iphone 12, via this "switch to iOS" app, or by doing so there would be a risk to infect my new Iphone 12? That's the problem.
[General Questions and Answers] blackhawk:
Rule #1- it can always get worse.

Ask any combat Vet.

It takes less then half day to 2X back that up to 2 flash sticks.

Apples get infected too, they're not immune if there's a payload there to target them.

If the new OS gets reinfected you'll need to start, again, from the beginning.

That's only one of many ways those trash social apps can mess your life up.

I'm not on FB, WhatsApp, etc. You saw how easy it was to get where you are now... you know the definition of insanity, right?
[General Questions and Answers] Columbus93:
Holy.. Ok, I understand what you mean.

I already backed my main stuff up into the first flash stick. Now waiting for the second one.

What if I just open my older Whatsapp and Gmail accounts from the new Iphone? Changing passwords again and enabling 2FA, ok, but they'll ask If I want to recover my past backups and messages stored into my google Drive. Can I do it or just have to give up on all my past Whatsapp messages and media?
[General Questions and Answers] blackhawk:
Do it but again I wouldn't let WhatsApp, FB etc run on my phone. The only reason it's on the phone is because you loaded it. After which it may have downloaded other payload packages.

This isn't the only way social engineering can be weaponized though. It can cost you time, money, your livelihood and more.

If the malware slips by you however will be doing this again... the only way to know is to try and see what works ie trial and error. Adjust your strategy based on those results. Maybe your hacker was only good for one shot.

The fact you haven't IDed the malware isn't a good start, but you have to start somewhere.
[General Questions and Answers] Columbus93:
Sir I know what you mean, but my work puts me in a team which is costantly in contact with people, so I cannot live without Whatsapp at least.

I agree with you, I can only try and hope for the best, no third option.

Do you know any app that could help me identify this supposed trojan/RAT? I've heard about apps like Suricata and Snort, which are specifics in identifying RATs, where every other antivirus fails.. like happened in my case.

I also tried to call a professional to analyze my phone to identify this kind of threath. Asked me 1350 bucks ($).
[General Questions and Answers] blackhawk:
Keep a separate work phone.

Factory reset it and see what happens.

Streamline the process as best you can because you'll likely need to repeat it... sooner or latter.

If you still have the original file that caused it scan it with Virustotal.
[General Questions and Answers] Columbus93:
Definitely. I don't have the original file that unleashed this ordeal, because it was a fake video I was tagged in on my Facebook profile page. Clicked on it, won't open but asked to install the latest flash player. I did and shockingly got the monster inside my phone. The psychopath switly told me "I knew you'd done it.. ****ing idiot" then removed all the posts.
[General Questions and Answers] blackhawk:
Another good reason to ditch FakeB. They tolerate those types of radicals, even encourage them.

So learn, clean the phone and move on.

Keep work and your private life as separate as possible especially online.

Don't pi$$ where you drink...

Just for amusement check out this prime citizen's posts on Twitter (another bad site):

https://mobile.twitter.com/marcallison144

Then look at what this poster really is:

Former teacher who sent X-rated emails to student, sought to ‘drink her blood’ gets 10 years

Marc Sherman Allison, a former orchestra teacher at Cain Middle School in Rockwall, received the maximum sentence Thursday after pleading guilty to online solicitation of a minor.

nypost.com

He's a monster. There are some clues in his posts but damn...
[General Questions and Answers] MrHayman12.1:
Yo.

Here's what you need to do. Turn on airplane/flight mode to disable internet access on your phone. Open settings, then use the search option to find the "Device Admin apps" menu. This may be different depending on device. If it's not listed there, go back to the main menu of your settings app and check your accessibility settings, or go to the app list. There's a few ways to get there, but I'm not 100% sure of one that'll work for a Huawei device.

Basically, you're looking for any apps that don't belong, or ones that you don't remember installing. You'll find it there.

This app isn't a system app, as that takes root access. Remember that. Also, change your passwords *after* getting rid of the app.
[General Questions and Answers] Kenora_I:
problem is theres no payload, unless I'm talking about those fonts that crash the phone xd
[General Questions and Answers] Kenora_I:
Welp, No. Hackers with root access in a phone would be able to use data and wifi without it being on.The wifi card is always on.

Turning on airplane mode just limits the OS access.
[General Questions and Answers] blackhawk:
Point is iPhones aren't secure either... maybe the hacker is, you know, crafty.
[General Questions and Answers] Kenora_I:
Hmmmmmmmm, maybe but very unlikely. Unless he made a dup sim card and inserted it to log your calls and sms and stuff.
[General Questions and Answers] Columbus93:
I hear what you say. Also I've seen those twitter + nytimes post and it's almost funny. It funny that the most normal good looking people can be the most atrocious psycopaths at the same time.

The person who is trying to destroy me is not the common indian/russian hacker/scammer but a 30 yo woman, good family, still studying medicine at the university. She's quite late with her studies, she lost quite a lot of time, and now I can see why, what she does in her "free time". You would never suspect about this person by looking at her social profiles, but now I'm seeing what she is capable of. Or maybe she just hired someone who has those skills.

Edit: You didn't tell me what do you think about those RAT hunting apps, like solar winds, snort, suricata, Ossec etc.. they are mostly open source but looks like they are the only avaible option to detect these well hidden malawares, where every other antivirus failed.
[General Questions and Answers] blackhawk:
She doesn't have the ethics or morals to be a doctor.

If I can't address a malware issue in an hour or two it's factory reset time. I don't play with it; my only goal is eradication and damage containment.
[General Questions and Answers] Columbus93:
do you believe it's safe to reinstall whatsapp with my same number into my new iphone and recover all past message from the whatsapp backup?
[General Questions and Answers] Kenora_I:
Ehhhh my dad is Indian lmao

That type of prejudice is kinda offensive ngl.
[General Questions and Answers] Kenora_I:
Yes. Its an iphone no malware from a android would work there.

The number will be fine unless the hackers leaked it to some spam companies or smth.
[General Questions and Answers] Columbus93:
The only device admins apps I see are two antiviruses I installed recently. The other apps are just ordinary apps that I installed myself. I remember each one of them. I uninstalled a couple others related to Facebook that I couldn't recognize but I'm not optimistic: maybe the thing lays undetected as system registry process.
[General Questions and Answers] Columbus93:
no prejudice in there believe me.. but it's a fact that India is a whole huge subcontinent with some among the most skilled informatics in the world.. some of them choose the path of good.. some others not..
[General Questions and Answers] Kenora_I:
Have you updated your phone, didnt google patch this vulnerability???
[General Questions and Answers] Kenora_I:
That aside what is your android version and maybe screenshot the whole about phone page and post here please?

Thanks.
[General Questions and Answers] Columbus93:
Sure! I'm going to write it down because everything is set in my native language (italian):

Device Name: Huawei P30 (ELE-L29)

Build number: 11.0.156 GPU Turbo

Emui version: 11.0.0

Android Version: 10

Imei: (they're two of them)

Processor: Kirin 980

Ram: 6 gb

"Mainline software" update: 2021-06-01

Kernel version: 4.14.116

android@localhost#1

thu apr 8 CST 2021

Security patch level: march 1, 2021

personalized version VDFIT 10.0.0.8 (CF F01)

If you need a picture as well just let me know!

The last "I see everything you do" attack by the stalker go back to may 16. Then only generic insults, maybe she had her toy hampered by some security update or I accidentally removed the RAT ? I cannot tell for sure.
[General Questions and Answers] Kenora_I:
Maybe a security update broke it lol.

You can just dirty flash your phone to the latest stock rom any remments would be removed.

Then it would be fine. You wouldn't get any hacked issues till another exploit comes out. Probably not
[Xiaomi Black Shark 3 Questions & Answers] maikel56hs:
hay rom y twrp para este movil?? , tiene que desbloquearlo xiaomi ?? el problema que tiene es: se rinicia con cualquier web, llamëse de pelis o cadenas de tv, en todas arranca cuando arranca bien. ya despues de un buen rato me dice que que vaya al cine a ver la peli, me lo ha echo hastres veces en la misma, tengo la duda de querer hacer con una piedra muchos moviles del mismo. TIENE ARREGLO???? Gracias...

MOD EDIT: Please post only in English according to the FORUM RULES or at least add an English translation below your foreign language(Google translator for example), translation added below:

is there rom and twrp for this mobile?? , do you have to unlock it xiaomi ?? the problem it has is: it is rinicia with any web, call it movies or TV networks, in all starts when it starts well. and after a good while he tells me to go to the cinema to see the movie, he has cast it to me hastres times in it, I have the doubt of wanting to make with a stone many mobiles of it. IT HAS FIXED???? Thank you...
[Touch Diamond, MDA Compact IV ROM Development] lanciaman:
Hi Guys,

Just one (perhaps silly) question: I don't have a mobile date connection on my diamond.

So I always get an error message if I look at the weather forecast, because the system wants to update the weather information.

What I need: I want an automated update of the weather forecast when the diamond is connected to the PC via USB (every 30 minutes), but I don’t want a update if the diamond is not connected to the pc.

What do I have to do?

Thanks a lot
[Touch Diamond, MDA Compact IV ROM Development] mccune:
This has nothing to do with ROM development....

You can only use the manual update when you've disabled auto update.

Maybe you can achieve your goal using Mortscript. This is a very powerful program :)
[Xiaomi Mi A2 / 6X Questions & Answers] Marlonese:
Hey everyone!

My grandparents use a Mi A2 as their daily driver and since software support from Xiaomi stopped I wanted to ask

which custom rom is best suited for what I'm looking for. I'm looking for a rom with inbuilt gapps, updater in settings

and (optional but prefered) preinstalled camera app that's not the snapdragon camera.

thank you in advance
[OnePlus 9 Pro] ztotherad:
so do i need to flash my tmo variant to the EU software or can i flash it to global?
[OnePlus 9 Pro] galaxys:
EU, see the t-mobile guide for details:

https://xdaforums.com/t/convert-you...u-via-msm-no-unlock-bin-needed.4272837/unread
[OnePlus 9 Pro] ztotherad:
the cog? yeah i think I'm going to do it today once i get home.