Rootkit

A rootkit is a deep, hidden type of malware that gives an attacker lasting control of a device while hiding itself from you and from scanners.

Rootkit: A rootkit is malware that buries itself deep in the operating system, sometimes below it, so that it can stay hidden and keep control. It hides its own files and activity from normal tools, which makes it hard to find and even harder to remove completely.

Rootkits are less common on ordinary phones than fake apps, but they exist, especially on cheap phones with unknown firmware, rooted phones running unsafe tools, and computers with pirated software. Once installed, the rootkit can switch off security tools, hide other malware, and give a stranger remote access without any visible sign. Because these tools run with the highest rights, they can also read everything you type or store on the device.

Because a rootkit lives so deep, normal uninstalling usually does not work. The reliable fix is to reinstall the operating system from a trusted source, or to reset the device fully. Avoid rooting your phone, buy phones from known sellers, and keep the system updated so known holes are closed. Even trusted antivirus tools may miss it, since the rootkit can lie about what is installed.

Tips

• Buy phones and laptops from trusted sellers; unknown firmware can ship with hidden software.
• Do not root your phone or run tools from unknown websites that ask for full system access.
• If you suspect deep infection, back up only your photos and documents, then do a full factory reset.

Related terms