I’m running Graphene on a Pixel 6. I lost it and someone opened it somehow and called two of my contacts to give it back.
I’m a bit confused how this even happened. When I got the phone back, they were going through my contacts. I checked app usage stats and they went through a banking app (not missing money), maps, signal, etc.
Is there a way to figure out how they even unlocked my phone?
Thats not what i said.
Modern Smartphones offer a much better protection against data extraction than regular Computers/Laptops.
Sure, but how often do you take your desktop on a walk?
I wrote Laptop also. Pls do not try to misdirect.
The own OS and preinstalled app in a Mobile are extracting your data. This you can only avoid to root it to be able to desinstalar them, but this cause that you must made the security updates by yourself, in rooted phones it isn’t automatic. Than use only apps from F-Droid and not from the Store, install an paid AV and use VPN. Only in this way it is somewhat more secure. Better if you use some Linux Mobile.
How is this different from Windows?
Certainly not much in a Windows as is, but in Windows you can avoid it in Android or iOS you can’t, apart in PC are infinity of more tools to avoid acceses than in your phone. I think that in the story of this Thread it is proven that it is easy for an specialist to access a phone, as seen by the author of this thread.
As said, don’t store important data in your phone, I don’t even connect to my home WiFi when I don’t need it, nor Bluetooth, apps only from F-Droid as much as possible, check the permissions of all your Apps and let only the permissions really needed, delete or at least desactivate the preinstalled and default apps which you don’t need. Check your apps with Exodus Privacy, use an good AV (BitDefender is one of the best), because the Play Protect from Google is a better Placebo.
There is no proof at all in this thread. The question is unanswered. It is much more likely that OP fucked up and left his phone unlocked than anything else.
There is a reason why companies pay hundreds of thousands of dollars for those kinds of exploits/bypasses. Cause they are not trivial.