CyberCertPrepMobile Security FundamentalsMobile Threats & MalwareEASYFree question
A parent discovers their child's Android phone has an app called 'System Health Monitor' that does not appear in the app drawer, has no launcher icon, and runs persistently in the background. The app was found to be logging GPS location and call logs. What category of software is this?
- A.A. A legitimate Android system process for device diagnostics
- B.C. Mobile EDR (endpoint detection and response) software installed by school IT
- C.B. Stalkerware: consumer-grade surveillance software designed to hide from the device owner while collecting sensitive data
- D.D. A Device Policy Controller (DPC) app for Android Enterprise management
Why C is correct
Stalkerware is commercially sold software designed to covertly monitor a device user without their knowledge. Key characteristics include hiding from the app drawer (by disabling the launcher icon), running persistently as a background service, and collecting sensitive data (location, calls, messages) reported to a third-party portal. It is distinct from legitimate diagnostic tools (which are transparent), school MDM/DPC apps (which are disclosed to users), and enterprise EDR (which is corporate IT managed).
Know someone studying for Mobile Security Fundamentals? Send them this one.