As a security analyst responding to a suspected mobile compromise, you are reviewing the evidence in this case.
A parent discovers their child's Android phone has an app called 'System Health Monitor' that does not appear in the app drawer, has no launcher icon, and runs persistently in the background. The app was found to be logging GPS location and call logs. What category of software is this?
- A.Device policy controller: the management agent an enterprise installs to apply configuration to an enrolled handset it owns
- B.Mobile endpoint detection software: the agent a school district deploys to watch for threats on a handset it issued to a student
- C.Stalkerware: consumer-grade surveillance software designed to hide from the device owner while collecting sensitive data
- D.A platform diagnostic service: the daemon the operating system runs to collect telemetry
Why C is correct