Back to AppScamRadar
Medium THREAT

com.android.ons (Opportunistic Network Service)

Technical Analysis & Behavior
Package Analysis for 'com.android.ons' (Aosp / Advanced Debloat Target): Opportunistic Network Service From what I can glean in the source code it seems like this provides a list of available networks and assigns each network a priority. I've never seen it run on its own, so this might be part of some automatic network switching setting that I have turned off. Android users frequently spot 'com.android.ons' running persistently in Battery Usage, Network Data Monitor, or Developer Running Services. Note: Malicious trojans and stalkerware APKs also frequently spoof legitimate Aosp system package names like 'com.android.ons' to evade manual detection.
Package ID / SHA256 Hash
com.android.ons
Threat Family
Aosp Background Bloatware Package
Target Platform
Android (Aosp System / Preload)
Date Logged
2026-10-17

Device Compromised? Scan & Protect Your Identity

If you installed or interacted with this APK, your credentials, 2FA codes, and banking apps may be exposed. Activate real-time mobile antivirus protection immediately.

🛡️ Activate Surfshark Antivirus & Alternative ID 🔒 Cloud APK Sandbox — Coming Soon