Technical Analysis & Behavior
Package Analysis for 'com.oneplus.factorymode' (Oem / Recommended Debloat Target): FactoryMode Used in the factory to test devices. Type *#808# in the OnePlus dialer to acess the hidden menu. Potential security risk: It's possible for an app to enable root access on any device with the APK pre-installed. For now, this only works in ADB, which requires local access to the device. Android users frequently spot 'com.oneplus.factorymode' running persistently in Battery Usage, Network Data Monitor, or Developer Running Services. Note: Malicious trojans and stalkerware APKs also frequently spoof legitimate Oem system package names like 'com.oneplus.factorymode' to evade manual detection.