Untitled

Abstract

A user's consent is required for sensitive information to be shared with third parties. Data exfiltration is one of the main end goals of cyber-attacks and with the dominance of Android in the smartphone market, many Android users are susceptible to this data theft. Most of these Android users are unaware of the theft of their personal data to an unauthorised entity. The entities responsible for this leakage can vary from malicious hackers and mobile network operators to the phone company themselves. Our paper aims to detect such data breach of privacy using two methods. First by installing a packet analyser computer program (tcpdump) directly on the phone and second by using a USB Adapter on nearby phones. Results show that data is being exfiltrated from the phones we tested on and phones from one country, in particular, are more susceptible to data exfiltration.