Technical Analysis & Behavior
Package Analysis for 'com.samsung.android.galaxycontinuity' (Oem / Recommended Debloat Target): Samsung Flow ( It's a service to 'seamlessly' connect your devices. You can authenticate your Tablet/PC with your smartphone, share content between devices, and sync notifications or view contents from your smartphone on your Tablet/PC. You can turn on the smartphone's Mobile Hotspot to keep your Tablet/PC connected. You can also log in to your Tablet/PC with your biometric data (Iris, Fingerprints) if you register with Samsung Pass. Has more than 81 permissions. Not the kind of app you want to keep installed if you don't use it. It increases the attack surface and can potentially compromise a lot of things (including your computer). FYI, 4 CVE has been discovered between 2021 and 2022: Pithus analysis: Android users frequently spot 'com.samsung.android.galaxycontinuity' running persistently in Battery Usage, Network Data Monitor, or Developer Running Services. Note: Malicious trojans and stalkerware APKs also frequently spoof legitimate Oem system package names like 'com.samsung.android.galaxycontinuity' to evade manual detection.