Response after installing a malicious app [closed]
After being encouraged by my contact in China that I NEED to have WeChat in for certain administration tasks, during my upcoming visit, I downloaded WeChat from Google Play.
Even though I hadn't begun registering an account, Android reported that WeChat had uploaded 448 MB of data in the background during the first minutes of me having the application. I know next to nothing about information security, so I am assuming that everything on the phone is compromised, even though I have no evidence to prove such a statement. To make matters worse, I was charging the application through the USB port on my laptop at the time.
I reacted by factory resetting the phone and changing all my passwords.
Thought experiment: Were we to replace WeChat in my description with the fictional malicious "app X" proven to be gathering all sensitive information it can on an Android system and reporting back home, what would be the sensible response?
