Android › Module 1 › Lesson 4
Spyware Indicators
Battery drain, odd permissions, stalkerware clues, and when to suspect surveillance
Opening
Not every threat wants your bank PIN
Some malware wants money. Spyware wants you: chats, GPS, photos, microphone. Stalkerware is frequently installed by people you know—partners, jealous contacts, abusive situations—not only remote criminals. Indicators are subtle. Patterns matter more than one weird glitch.
1. Technical Warning Signs
Battery & data spikes
Unusual drain or background data with the screen off, especially after a new app install.
Mystery apps / Device admin
Unknown packages, hidden icons, or admins you did not enable.
Permission sprawl
Apps with SMS, Call logs, Accessibility, Notification access you never intentionally set.
Settings you did not change
Unknown VPN profiles, accessibility services, notification listeners, or disabled Play Protect.
2. Human Context Matters
If someone insisted on “checking your phone,” knew your PIN, or installed a “parental” / “anti-theft” tool without consent, take that seriously. Stalkerware victims may need safety planning beyond tech steps—trusted friends, local resources, and careful evidence handling. For remote malware, remove shady apps, revoke permissions, change Google account passwords from a clean device, and consider a factory reset after backup.
Check Accessibility & Device admin lists
Settings → Accessibility and Device admin / Device admin apps. Anything you do not recognize goes off immediately.
Knowledge Check
Spyware is primarily designed to:
Multiple choice
Knowledge Check
True or False: Sudden battery drain plus unknown Accessibility services can be a spyware clue.
True or False
Knowledge Check
Who sometimes installs stalkerware?
Multiple choice