New Android Spyware Requires Password for Uninstallation

A newly discovered Android spyware variant is making it harder for victims to remove it by requiring a password during uninstallation. This stealthy phone monitoring app effectively locks users out of the removal process, creating a major security concern.

The spyware’s password is set by the installer, typically someone with physical access to the device. This prevents victims from easily regaining control of their phones.

According to a recent report, this Android spyware exploits a built-in system feature known as “overlay,” which allows apps to display content over others. By leveraging this capability, the spyware forces a password prompt whenever a user attempts to disable or uninstall it via Android’s settings.

How the Malware Operates

The spyware is usually installed by someone who has direct access to the victim’s phone and knows their passcode. Once installed, it grants itself device administrator privileges and hides its icon, making detection difficult.

When the victim tries to uninstall it, the overlay feature activates, displaying a password prompt that blocks removal. Without the correct password, the spyware remains active, continuously monitoring the victim’s messages, photos, location, and other sensitive data.

Security researchers warn that spyware apps are not only designed to stay hidden but are also becoming increasingly resistant to removal.

Removing the Spyware

Fortunately, experts have identified a method to bypass the spyware’s protections. By rebooting the device into safe mode, users can temporarily disable third-party apps and remove the spyware without triggering its security mechanisms.

Steps to Remove the Spyware:

1. Enter Safe Mode: Press and hold the power button, then long-press “Power off” until the “Reboot to Safe Mode” option appears.
2. Disable Device Admin Privileges: Navigate to Settings > Security > Device admin apps, then deactivate the suspicious app.
3. Uninstall the App: Go to Settings > Apps, locate the spyware, and remove it.

This discovery underscores the importance of Android security awareness, as malicious actors continue to exploit legitimate system features for harmful purposes.

TechCrunch notes that this consumer-grade spyware is part of a growing market of phone monitoring apps, often marketed as tools for parental control or employee tracking. However, these apps are increasingly being misused for surveillance and unauthorized tracking.

To mitigate the risk of spyware infections, security experts recommend several preventive measures, including keeping Google Play Protect enabled, regularly reviewing device administrator permissions, and restricting physical access to your phone.

For those concerned about potential spyware infections, experts advise using reputable antivirus solutions like Malwarebytes or Norton, which can detect and remove known stalkerware applications.

As these threats continue to evolve, users should remain alert to unusual device behavior, such as the phone overheating, slowing down unexpectedly, or showing unexplained spikes in data usage—all potential indicators of spyware activity.