My Device was Compromised...Here's What I Did

[@AllThingsSecured]

What other steps would you add to this checklist? Leave a comment, and if you haven't already, scan your phone for malware using Certo. Get 10% off using this link: www.certosoftware.com/AllThingsSecured

[@moisescruz3527]

One good tip that would give anyone peace of mind if you had the phone confiscated by the government is to back up your phone and all its data before leaving your country for vacation or business into that other foreign country. That way when you come back if you have any doubts you can reset your phone to factory and still install your data that was backed up prior to leaving your home. As a result not much will be lost except the days or weeks that you was on vacation or business in that foreign country. Another tip would be to use a secondary old phone to travel in a foreign country. That way if they confiscate your phone not much is compromised as far your personal data is concerned and you can even reset to factory with no problem. You can even have a prepaid service installed on that old phone so that it will be disconnected 30 days after your vacation or business trip. That’s how i would do it. Thanks for your videos and hello from Puerto Rico.

[@Jerryjoe-lh3qc]

Reflash an stock firmware ASAP,

[@Someuser391]

When suspecting malicious content, a reboot of the phone might help, as most malicious software doesn´t have persistence on Android phones. Just rebooting your phone regularly in general is not a bad thing.

[@aaronvotan]

I'm struggling with the recommendation to physically plug an "infected" device into your non-infected computer?

[@AllThingsSecured]

There are safe ways to do this. But are you assuming that a mobile malware is somehow designed to work on both mobile and desktop devices?

[@getzybaggins]

@@AllThingsSecured you don't think it could include additional payloads? anyway, nice ad for Certo

[@timmy7201]

1. Buy a raspberry pi, configure the RPI in read only mode, test potentially infected devices on that... 2. Set it up as a standalone device, with keyboard, mouse and monitor! 3. Do not connect it to your LAN or WiFi network, to prevent spreading anything to other devices! 4. You can format the RPI's SD card afterwards. If you don't want to plug it into your computer, then plug it into an old phone or camera and format it there...

[@lorenzocole8166]

I would just get a new phone and start from scratch. I'm a victim of the Columbus Data breach.

[@Slimothy]

*I definitely would not add another 3rd party (in this case, Certo) to the mix if I thought my device was compromised. I would wipe the phone (maybe gather 2FA keys manually by hand first), throw the phone away, buy a new one, and start from scratch.*

[@AllThingsSecured]

Different people approach it differently.

[@kiss-myasthma7753]

I agree and I think this is just an ad for certo. People need to pay bills somehow so he is making this paid ad mixing in some common sense and already known things to do. Who is certo? What do they do with my data? YKWIM?

[@a9503128]

But who are Certo?

[@timmerk7363]

I think, given the money to do this, I would buy new devices and change my passwords from the new devices, and then factory reset and sell all of my old ones.

[@jbrock8596]

If you have enough money to buy all new devices you probably can afford not to sell your old ones. Smash them.

[@nani8ot]

​​​@@jbrock8596Buying new devices doesn't have to be factory new. Buying them used should be enough, since they're out oft the country already. This wouldn't cost much, depending on your luck.

[@AllThingsSecured]

Money would be the important factor here.

[@NiklasAndersson7]

#1 Get a new phone, and set it up from scratch with new MFA. Preferably hardware-key like Yubikey. #2 Keep the old one as a backup, should you need to extract forgotten credentials.

[@AllThingsSecured]

That's definitely a good option.

[@timmy7201]

1. Changing your passwords on a compromised device, is as useful as changing your front doors lock, when your garage-door is stuck in the open position. 2. Using 2FA on a compromised device, is equivalent to a vault with integrated display that tells you the code. 3. I highly doubt that the anti virus has access to the boot-loader partition of your phone. It's equivalent with asking Trump medical advice when you're suffering a viral infection. 4. Reviewing every app is a good start... It won't however clear an infected boot-loader... 5. Review app permissions is also a good start... But this also won't clear an infected boot-loader... 6. Full factory reset is probably the best solution... However, even this won't clear an infected boot-loader... With a government or state actor, it's probably best to re-flash the whole boot-loader and OS image on the phone... Or just get another phone instead...

[@AllThingsSecured]

Good first point and one I didn't address - it's best to change these passwords from another device. As for the 2FA - if you're using a security key it won't matter if the device is compromised.

[@a1isrising]

​@@AllThingsSecuredlike Yubykey thing , does that help keep your ability to get into website safe or am i missing the point

[@timmy7201]

@@a1isrising Yubykey should be safe, as long as you prevent anyone from physically tampering with it...

[@a1isrising]

@@timmy7201 thanks

[@PepiCzech]

Why not just get a new phone then? Problem solved...

[@SmokeFFM]

Even a factory reset could not be enough. Depends on the thread level and what kind of "people" you are struggling with. The best would be, in advance, going with an alternative phone and alternative accounts to risky places.

[@StijnHommes]

Shouldn't you scan for malware BEFORE you change any passwords? If keyloggers are installed and pick up the new codes, you're screwed.

[@robtihanyi1155]

Good job Josh. Highlighting how to fix a situation will always be preferable to replacing your gear...

[@Learningin-L]

Is offloading unused apps on Iphone a equivelent alternative to deleting apps? I am worried about losing data from apps I delete. And than I go into privacy & security and uncheck permissions.

[@AllThingsSecured]

That's not always possible for everyone, as good as that might be.

[@infibeamX]

Certo is better than Norton or Kaspersky?

[@certosoftware]

Thank you for reaching out! Certo specializes in spyware detection and removal, with unique features like keylogger and location tracking app detection. While Norton and Kaspersky are highly regarded antivirus solutions, Certo focuses specifically on protecting your device from spyware and other cyber threats that can often go undetected by traditional antivirus programs. It's really about what type of protection you’re looking for-feel free to ask us anything else to help guide your decision!

[@petersbluewaterfun]

This seems like just an ad for Certo, which I understand, but looking on their website it seems hard to find a specific threat protection or detection list, just vague statements about being great, and things like intruder protection, whatever that is... Would be nice to have some idea what you are paying for. Otherwise it is just another anti-virus ish solution.

[@PepiCzech]

Wow, you are definitely another level of security! Thank you! I'd like to know how to check my computer. Is there something like Certo for comps? Could you let us know? Thanks!

[@rakly347]

Is everything on this channel an ad? uBlock even blocks the link in your description because it redirects to a pxf domain lol. Be sure to disable or clean your cookies if you decide to follow the link. It's a known tracker. Irony much?

[@steveshuffle]

Josh that sounds terrible.. why would you ever be arrested and/or treated like that?

[@AllThingsSecured]

You lose all rights when you live in a foreign country, I've learned.

[@RT-mn2pb]

@steveshuffle. Hate to say this but that's an astoundingly naive question. The one and only reason is that it was China.

[@PepiCzech]

@@AllThingsSecured Correction... Not in a foreign country but in a communist country. That is a huuuuge difference!

[@bryce913]

Excellent vieo. I also wanna hear the story behind the detention.

[@AllThingsSecured]

It's a long one...

[@bryce913]

@@AllThingsSecured would be helpful for things to avoid. Sometimes we're going about our own business, and we end up being political targets because of our passports. Hence, I have been avoiding HK layovers.

[@PepiCzech]

@@bryce913 Just don't go to any communist countries. Problem solved.

[@ikust007]

Excellent . The issue.. I don’t trust any third party software

[@kreelamoore5247]

To summarize it all: if a state government agency took possession of your phone, they probably either installed some malware you cannot see or did a SIM clone of your computer and installed the 2FA app on their machine with your accounts. Assume the worst and swap phones, then change all passwords and 2FA codes, am I correct?

[@Bull.2024]

Does this apply only on Cellphone or it would work on a laptop as well? Thanks!!

[@Simon_fpv]

If any of your devices are taken by a government just get rid of it and get a new one

[@tr3vorb438]

Check out the ESET free online scanner for PC’s. They found and removed Trojans on my laptop that Microsoft missed.

[@AlvesCrewUSA-BRZ]

It would be great if you make a video on how to factory reset iPhone and starting all over without using the backups.

[@akeaveney]

Great concise videos as always!

[@AllThingsSecured]

I appreciate it.

[@terryschima4964]

I’ve been waiting for this one.

[@AllThingsSecured]

I hope it didn't disappoint, Terry.

[@Gene-x2s]

What do I do if o know they are coming thru my att router. Can I use my Yubi key on it?

[@TonyPadgett]

Is it possible to set up the iPhone to use a Yubikey to unlock it rather than FaceID?

[@AllThingsSecured]

Not that I’m aware of. I believe you can do it with a laptop computer, but not a mobile device.

[@timetriad6199]

Don’t ever take your primary devices to foreign nations. Use a burner phone so to speak, and keep any files you need for the trip on an encrypted flash drive. When you get home… wipe EVERYTHING and shred the “burner”. A large company I worked for required a “China Loaner” for business trips along with a password protected encrypted USB drive.

[@AllThingsSecured]

It's different when you actually *live* in that foreign nation (which was my situation). But yes, I agree that as a traveler (business or personal), it's better to use a burner phone overseas.

[@definitelynotclickbait8283]

is there same for pc?

[@ruudvanveelen]

In case you think/now your phone is compromised just buy a new one. It is way more secure and do not forget to get a new phone number too

[@ThatGuy.75]

I am sorry but with the price of phones that is prohibitively expensive. While I agree with you in your thoughts though.

[@jbrock8596]

@@ThatGuy.75 Can't be more expensive than having a truly compromised phone.

[@myworldstorm]

All of our devices are compromised every time we do a Google backup!

[@BDnevernind]

Why are you doing this?

[@yonathanyak]

A Google backup is uploading, not downloading anything.

[@AllThingsSecured]

Ok

[@yonathanyak]

@@localfixx4184 Did you have something constructive to say?

[@repatch43]

And that's why a couple years ago I told my company that I wouldn't be going to China on business trips anymore. No thanks.

[@AllThingsSecured]

Yea, makes sense.

[@CoffeeMonster188]

Do you need another security app along with certo? Or is certo good on it's own? I asked Certo! And they can't seem to answer that question! 🤨

[@jauho7483]

You don't need any security apps. Certo and others are just cash grabbing spyware. If you believe that your device might be compromised, you should do a factory reset

[@AllThingsSecured]

What other security app are you looking for? No, it's just Certo on it's own.

[@CoffeeMonster188]

@AllThingsSecured I didn't know if you need to still have a security app like Bitdefender or something to go along with Certo!

[@CoffeeMonster188]

@@AllThingsSecured ???

[@certosoftware]

Thank you for your question! Certo is designed to be a comprehensive solution for spyware detection and removal, so many users find it sufficient on its own for protecting their device from spyware and similar threats. That said, security is multi-layered, and some people prefer using additional apps for broader protection (like VPNs) to cover different types of risks. We’re happy to answer any other questions you may have to help you feel confident in your device’s security.

[@blackwinter12]

I tried this, and they got back in my phone. I believe my carrier is allowing them to do it.

[@AllThingsSecured]

I doubt that.

[@cliz30770a]

Yes, even factory reset or setting up a new phone will not solve the problem because the carrier is compromised. Once hackers have doxxed your details, they can easily find you with help from their people in the carrier. No one has a solution to this problem and such tips, while useful, give users a false sense of security.

[@natalie6117]

@@cliz30770awhat about getting a new phone number? Does that help in any way?

[@spywhere]

Alright, alright, you found me...

[@AllThingsSecured]

👍👍

[@Jerryjoe-lh3qc]

In that case , sell the phone and buy another one. Probably your firmware where hacked or your celphone modem could be picked. Or try not only to reset the phone, but to reflash a fresh stock firmware, (ej: Odin on samsung and a stock firmware), this overwrite all, even reflash the modem.

[@AllThingsSecured]

When it comes to a government getting a hold of your phone, I agree. And eventually that's what I did. For the average person who just wants to know that they're phone hasn't been tampered with, though, that might feel a bit extreme.

[@NigelBall-tr2ke]

Thank you, great video. Please could you let me know if there is some spyware on a smart phone/tablet will this dissappear if the devise if reset.

[@gouthamraj4250]

The keepsafe app is really safe?

[@nvsv_wintersport]

Officials from the EU going to Chinese car makers to check if these cars comply to EU-rules get simple Nokia cell phones and simple laptops to ues. These devices are obsolete once home and get destroyed. Not really an option for us, but it is something to keep in mind.

[@Anondady]

Great video. Learn something new.

[@AllThingsSecured]

Thanks so much!

[@terryschima4964]

I disagree; I think you need all new devices in a case like this. Governments have the best malware. No firmware is safe!

[@AllThingsSecured]

In my case I would agree - and I did eventually replace my phone. But for the average person who fears regular malware, that's a bit extreme.

[@Aceiolix]

This are mostly for like your "ex-boyfriened "doing the hacking- and this are what most people can do since they cant do more unless they destroys the device but a " agent" might have comprised your online account with malware so your new phone gets infected that way .

[@LazyChemist_Tc]

I have some security question concerning password managers. Should i save the password for my mail used to login to the password manager on said password manager? Is it only okay to do so if i use 2fa keys (physical keys) or a software 2fa such as authy or google authenticator to secure my password manager? Or should i save it some other way, such as on a paper or separate phone password manager (samsung pass)? To begin with is it a good idé to use a separate password manager on my phone and laptop/pc? I have a main mail and a separate secure mail, should i change the mail used for my password manager to my new secure mail (protonmail) or should i keep using my old mail? The one thing that i am concerned about switching is for longevity, if protonmail shuts down will that mean i cant get into my password manager or will i have the option to change the mail used (maybe get a warning a certain amount of time before it shuts down?)? Otherwise i would want to change the mail, concidering the large possibility that my mail have been leaked in some way or another. I intend to keep my old mail, have one that is secure and only used for important stuff and a third for email aliases and less important stuff. The old i will try to salvage and use for less important private stuff.

[@Haughty-yt]

Unrelated question but what is your view on rewards apps (Upside, Fetch, etc.) From a privacy perspective? Do you use any rewards apps? Edit: So, another question actually: What are your thoughts on Rich Communications Services (RCS) especially now with Apple adopting RCS services alongsode iMessage? Personally I don't think RCS is being talked about enough, or at all really by privacy advocates.

[@nani8ot]

That's because RCS doesn't provide much privacy, compared to proper private messengers like Signal or Briar. At the moment RCS doesn't even do end-to-end encryption (except if your using proprietary Google Messenger to communicate with another Google Messenger). E2EE is a basic requirement for a private messenger. Also, almost all RCS servers are run by Google, as most ISPs don't wanna pay for it themselves. RCS is more private than SMS, but that's a really low bar to clear.

[@Haughty-yt]

@@nani8ot Yeah, obviously it's not as attractive as proper private messaging apps. I fully expected someone to point that out. I did however hear that the organization in charge (I believe it's called the GSMA) is working to implement E2EE as a standard for RCS across the board. My understanding is that the standard specification is called "Universal Profile" which currently does not include E2EE, it's just a bouns that Google tacked onto their Messaging app. I only bother bringing up RCS because not everyone is willing to switch to a private messenger. There's much better ways than RCS to communicate privately but I think it's still worth talking about.

[@Haughty-yt]

Well I'm not sure what happened but I think KZbin just decided to delete my original reply for no apparent reason. Anyways, yeah, I get it. I was fully expecting someone to point out that a real private messenger is a much better solution. However, I did hear that the GSMA (I think that's it) is planning on including E2EE as a standard feature of RCS. My understanding is that the standard specification for RCS is called "Universal Profile" which does not currently include E2EE, that's merely a bouns feature that Google gave to people with their proprietary messaging app. I only bring up RCS because not everyone is willing to switch to a private messaging app. It's not the most secure solution but I still think it's worth talking about.

[@A_Mkty]

Just give phone back to the manufacturer and ask for a complete software reinstall just tell them any dumb reason they will do it for a small fee. If you’re competent enough install it yourself by using a sandbox or by using a virtual machine. If that’s not an option then probably buy a new device and most importantly dispose that old sim card and move to a new network provider or get a new phone number. And finally use a physical security key. 😊

[@pomme4moi]

Did the government force you to hand over your smartphone password or use your biometrics to gain access to your smartphone?

[@Mitchomi]

Why no reply?

[@ufo-abductions]

Only the PAID version find malicious software hidden on iOS. The paid version offers security options not needed. If China had your phone factory reset only. 2:22

[@mikelytou]

Wait, is that event what triggered your awareness for privacy? Because if you were already privacy aware it seems like a weird decision to live in one of the most surveilled countries on earth.

[@AllThingsSecured]

Yes, that's part of what kickstarted this whole privacy journey for me.

[@RT-fb6ty]

A state actor should also include your own government($) . IMO worry about NSA, NSO, the FBI, MI6 the enemy within your own gates.

[@georgeferreira334]

First thing I would do if anyone else had been with my phone, specially the Chinese government would be to trash the phone. I can afford to buy another phone and start from there. No way I would trust any company or piece of software to check my phone. I would assume it's compromised and goes straight in the trash after putting a hole through it

[@nfranceschina]

WE WANT TO HEAR THE OTHER STORY ABOUT BEING DETAINED FOR TWO WEEKS IN CHINA! why were you targeted? what happened? were you physically forced to hand over your devices? were you compelled to give up passwords/pins stored in your brain? did they literally detain you in a room for 2 weeks or did they just take your devices for two weeks while you were there then give them back when you left?

[@noneya4820]

You know, I've been a follower for close to 4 years. I am disappointed. I honestly cannot keep up with all your "recommendations" you recommend one: I get it then you recommend another brand. It feels like your not caring about the safety of your followers and are just trying to get paid.

[@AllThingsSecured]

Thanks for following along. I’m honestly confused by your disappointment. I have specific recommendations for specific problems, and rarely do I switch brands. In this case I haven’t. Can you explain what other brand I recommended that has led to this confusion?

[@ak49mitchell]

Sorry, I have to ask (what others are also wanting to know), why were you in China? Work? Missionary? Or??? I'm sure there's a very interesting story on that whole event. Over two weeks of interrogation - crazy. Glad you're on the pther end of that now.

[@terryschima4964]

⁠No, what disappoints is that governments do that: they won’t obey their parents.

[@JACK-wh6jl]

Giving a NEW COMP ALL YOUR DATA ? NOT !!!!!

[@AllThingsSecured]

Who are you giving your data to?

[@mjs28s]

wouldn't the better idea be to not do everything on your phone?

[@AllThingsSecured]

Sure. That's one option.

[@A_Mkty]

You’re really struggling to sell me that certo software that makes you rich and me poor 😂

[@dashblack9304]

this guy gives off narc vibes. nice ad btw

[@RockTheCage55]

I think your an iphone user (as am i) & honest i'm comfortable with my security hygiene so i wouldn't have worried (unless you were forced to unlock your device & then i would have worried). I used a layer approach so i don't 100% depend on one product to keep me safe. If security is broken in one area its most likey going to be caught by something else I use. Depends on how thick your tin foil hat i guess.

[@AllThingsSecured]

I absolutely was forced to unlock the device!

[@RockTheCage55]

@@AllThingsSecured oh wow would have been worried then.

[@peterdelang]

Hartelijk dank !!

[@monuk00]

This reads like an ad. Unsubscribed.

[@glynnetolar4423]

Why go to China to begin with? That alone is a security risk. Hey look, talks about Apple again. Ugh. All things Apple

[@ThatGuy.75]

@@glynnetolar4423 Apple is as big of a threat as can be since China still has control over iPhones.

[@AllThingsSecured]

I lived in China for 10 years. Sorry to disappoint you.

[@bkid1776]

@AllThingsSecured I absolutely love your channel and I have been following your steps for the yubikey what kind should i get for 2FA and how exactly does it work. Does it work for all passwords?

[@mahirjan1984]

Thanks for another great video, Josh. I learn something - no, a LOT! - from each of your videos. Keep ‘em coming! Regarding living in a communist country, anyone should go in with their eyes open and expect that it’s always a possibility that they will use you as a political pawn, or just haul you in because of their paranoia. It doesn’t really matter what your actual work is. It just sucks that you had to go through that experience.