Unexpected device behavior: Ghost touch or Screen hack?Solved

Hi @mortimer, Ghost touch occurs when your device registers taps or swipes without any physical interaction. It’s often caused by hardware issues like a damaged screen, moisture, or a malfunctioning digitizer. While annoying, it’s not usually a security threat.

Screen hacking, on the other hand, is a remote cyber-attack using electromagnetic interference (EMI) to mimic touch inputs. Hackers can generate these signals from a short distance (around 40 mm), causing devices to register false touches. Devices with certain hardware, particularly those using MediaTek or Qualcomm chips, are more vulnerable to screen hacking.

I’m worried about using my phone on public Wi-Fi networks. Could I be at risk of screen hacking when traveling? How can Hexnode help prevent screen hacking on public Wi-Fi?

Hexnode offers several ways to help mitigate the risk of screen hacking on public Wi-Fi:

1. VPN enforcement: Ensures all traffic is encrypted, even on public networks.
2. Wi-Fi restrictions: Enforce policies to block connections to unauthorized networks.
3. App management: Restrict the installation of potentially malicious apps, including those carrying RATs (Remote access Trojans) or spyware. These malicious programs are often disguised as legitimate apps and may be delivered through phishing emails or malicious links.
4. Remote device lock/wipe: If a device is compromised, you can instantly secure it from the Hexnode portal.

When traveling, it’s advisable to use screen protectors or privacy filters and avoid leaving devices unattended in public areas, as these attacks can occur within 40 mm proximity.

How can I tell if my device has been hacked or compromised by a screen hack? Any signs to watch for?

Great question, @wilma! Here are some common signs that your device may be hacked:

1. Device acting on its own: Apps opening, typing, or navigation without your input.
2. Unusual Wi-Fi/Bluetooth activity: Connecting to unknown networks or devices without permission.
3. Hidden malware/spyware symptoms: Unexplained battery drain, overheating, or sluggish performance.
4. Unexpected ads or media: Pop-ups or videos appearing out of nowhere.
5. Compromised personal data: Changes in files, account logins, or password updates you didn’t authorize.
6. Suspicious redirects/pop-ups: Your browser opens sketchy websites on its own.
7. Unauthorized social media activity/spam messages: Your device sends posts, messages, or links, especially on social media without your knowledge or permission.
8. Calls made or received autonomously: The phone initiates or answers calls without your input.

Thank you, Ben. I have a damaged screen on my phone. Does this make me more vulnerable to hacking or ghost touch?

While ghost touch itself isn’t a hacking method, a damaged screen can reduce touch accuracy, potentially making it easier for EMI-based attacks if other vulnerabilities exist.

It’s a good practice to:

• Replace compromised or damaged hardware.
• Ensure the device firmware and security patches are up to date.

I hope this clears up your concerns about screen hacking and ghost touch. Feel free to reach out with any further questions.

Regards,
Ben Clarke
Hexnode UEM