Original topic:

Something weird is going on on my s22 ultra, please advice.

(Topic created: 03-14-2026 02:20 AM)
836 Views
hw710
Constellation
Options
Galaxy S22

I had a lot of my accounts hacked last Tuesday, around the 3rd. At first i was confused, having my accounts get logged out oen by one and i fought hard to restore them and have pass keys etc . Then i realised something, my phone was on ringer and i could hear light taps or feel the vibrations on the phone 'really quick, like a macro being set' when i was figuring out what happened. At first i just told myself maybe the 2 hours of fighting for my accounts made me tired, but i start to realise i wasn't. My bluetooth, quickshare, nearby devices, NFC were all being turned on, and whenever i turned it off it will try to turn it on from my quick controls again. When i realized this i locked my phone with the side button, not wanting to have him access the phone, and one of my screen unlock was a pattern and i could literally see it being drawn. I then set it to flight mode. Fast forwards more than a week now, I've checked all my apps, switched ISP, reformatted my phone, and it still happens. I checked my google activity and can see numerous apps being launched simultaneously during these attacks.

hxngwei_0-1773477632559.png

This was on 8th, fifth day of the attacks where i wasnt doing much. (these barrage of apps and information were common occurance, with some being weirder instances where my sim information and etc were accessed as well.)

It was driving me nuts from 3rd to around 6th, as I kept trying to see my devices (My galaxy shows 'Galaxy S22 Ultra' and I can see all these activity and weird logins were by a 'SM-S908E' which i know is the model for my device,) and these attacks were in the same location as me so it was really hard to tell which was which.

I decided to rest the device, format it, send it to a shop to fix my crack on the screen. When it came back, i disabled the few apps i thought had issues, link to desktop, screen mirroring etc. But i realised the same vibration on my phone sometimes. The attacks were less harsh, but still there, always randomly logging me out from my apple id on my other devices.

More screenshots from AFTER 10th, where I got my phone back after leaving it in the shop for approx 2 days, fully reset and had literally nothing on it.

hxngwei_1-1773478086513.png

This was less than 30 minutes ago, and I can see that this link has been accessed before previously but i deleted it, as i realised when clicked, it prompted me to save a script (on my pc)

hxngwei_2-1773478153539.png

This was from Yesterday, where i literally had my phone not on flight mode for 30 minutes or so.

hxngwei_3-1773478239077.png

This was maybe 1/4 of the day before, where I had no choice and cant be on flight mode during work.

hxngwei_4-1773478314464.png

same day, but few hours earlier.

hxngwei_5-1773478355678.png

This was 11th march, AFTER my phone has been fully reset etc. I spotted S suggest as well, and it wasnt available on the app store anymore. Again, I have activity logs from multiple google account takeouts that can confirm these activities log.

Sorry everyone for the massive spam, I did not know where to turn to and have been trying my best on solving it for over 1 week.

0 Replies