| Common entry points | Phishing links, malicious apps, unsecured Wi-Fi, outdated software |
| Applies to | Smartphones, tablets, laptops, and desktop computers |
| First recommended action | Disconnect from the internet and run a reputable security scan |
| Key behavioral warning signs | Unexplained battery drain, data spikes, unfamiliar apps, slow performance |
| Risk if ignored | Identity theft, financial loss, unauthorized account access |
Warning Signs to Watch For
Compromised devices rarely announce themselves. Instead, they show subtle behavioral changes. Recognizing these patterns early is your best defense.
| Common entry points | Phishing links, malicious apps, unsecured Wi-Fi, outdated software |
| Applies to | Smartphones, tablets, laptops, and desktop computers |
| First recommended action | Disconnect from the internet and run a reputable security scan |
| Key behavioral warning signs | Unexplained battery drain, data spikes, unfamiliar apps, slow performance |
| Risk if ignored | Identity theft, financial loss, unauthorized account access |
Unexplained Battery Drain or Overheating
Malware running silently in the background consumes processor power and battery. If your battery is depleting significantly faster than usual — and you haven't changed your usage habits — it's worth investigating. Similarly, a device that feels warm even when idle may be running hidden processes. Cryptojacking in particular is a known cause of unusual heat and slowdowns.
Unexpected Data Usage Spikes
Spyware and other malware often transmit collected data back to a remote server. Check your mobile or network data usage in your device settings. If an app you rarely use is consuming large amounts of data in the background, treat it as a red flag.
Unfamiliar Apps or Settings Changes
Scroll through your installed apps periodically. Apps you didn't install — especially those lacking clear descriptions or publisher information — can indicate unauthorized access. Similarly, watch for changes to your security settings, such as disabled lock screens or newly granted permissions you didn't authorize.
Sluggish Performance and Frequent Crashes
Malware competes for system resources. If your device has become noticeably slower, freezes regularly, or crashes apps that previously worked fine, and a software update isn't the cause, this warrants a closer look. For comparison, see signs a software update has gone wrong to rule out that possibility first.
Strange Account Activity or Pop-Ups
If you're seeing password reset emails you didn't request, or logins to your accounts from unfamiliar locations, your device may be harvesting credentials. Intrusive pop-up ads appearing outside of a browser, or your browser redirecting to unexpected sites, are also common signs of adware or more serious compromise. Review signs your password has been compromised if you spot account irregularities.
Not Every Symptom Means a Compromise
Many of the signs listed here — slow performance, battery drain, overheating — can also result from aging hardware, a buggy app update, or a full storage drive. See our guide to phone overheating and battery drain explainer for non-security causes. Use the full pattern of symptoms together — not just one — before drawing conclusions.
What to Do If You Suspect a Compromise
Suspecting a problem is not the same as confirming one — but it's enough reason to act carefully.
Malware
Malicious software designed to infiltrate, damage, or gain unauthorized access to a device. It includes viruses, spyware, ransomware, and other harmful programs.
Spyware
A type of malware that secretly monitors your activity — such as keystrokes, messages, or location — and sends that data to a third party without your knowledge.
Cryptojacking
An attack where malicious code uses your device's processing power to mine cryptocurrency for someone else, often causing overheating and slowdowns.
Root / Jailbreak
The process of removing manufacturer-imposed restrictions on a device's operating system. While sometimes done intentionally, malware can also force this to gain deeper access.
- Disconnect from Wi-Fi and mobile data. This limits any ongoing data exfiltration while you investigate.
- Run a reputable security scan. Use a well-known security application to scan for known malware signatures. Avoid downloading unfamiliar security tools in response to pop-up warnings, as these are often scams themselves.
- Review installed apps and permissions. Remove anything unfamiliar. Check which apps have access to your camera, microphone, contacts, and location — revoke anything that seems excessive.
- Change passwords from a separate, trusted device. Don't change passwords on the potentially compromised device itself. Prioritize accounts tied to banking, email, and healthcare.
- Update your operating system and apps. Many compromises exploit known vulnerabilities that updates have already patched.
- Consider a factory reset as a last resort. If the problem persists and you have a recent backup, resetting the device to factory settings removes most malware. Restore from backup carefully — avoid restoring the app or file that caused the problem.
If you use the same home network, it's also worth checking whether other devices or your router may be affected. See our related article on signs your home network may have been compromised for guidance.
For ongoing protection, keep your software updated, only install apps from official stores, and be cautious about links in messages or emails — see warning signs your account has been targeted by phishing for what to watch for.