Store & Online "responsibility-dumping" each other

[Kisorsosay]

 Purchased a new samsung a04s from a mall, Maya, in Chiang Mai, Thailand on about March 25th 2023. Fresh SIM, number and Google Account including all app accounts. A completely fresh phone.

I also bought a AIS sim2fly Sim to make international calls. They opened the phone, corrected it to their WIFI went through setup and handed me the phone. 

I went down to Starbucks to get coffee. While sitting I observed my phone going through familiar settings, updates, apps, etc. But then I noticed that the samsung Galaxy store started doing things that seemed odd. 

Galaxy Store sat active screen app and then it started opening up apps I realized after the 3rd time it happened. The app would switch to Samsung Messaging, then Files (blue icon) and Cloud .The screen would freeze a noticeable longer than usual moment during loading. When I'd click on the app the screen would flash black twice and then the phone would minimize the screen to Home Screen. I'd reopen the app that closed and I didn't notice anything that seemed different. 

It seemed my apps located in both Google Play and Galaxy Store kept updating, at least three times I visually witnessed app stores auto-run.

Three days later i completed all system/app installs and updates and settings adjusted. My GPS was the first, real indication something was wrong. Grab and Maps could not get within 25ft of me, sporadically shift my position and never settle on a spot. Each attempt to calibrate never completed. 

All functionality and power restrictions removed on strong data & wifi. When I entered Permissions When I pressed the three small dots in the right corner, immediately I realized without question, my phone was compromised and hacked. I didn't know how so I began to run checks on...literally everything. How everything connects to everything for insight into where the hole is.

Who's fault is this leak? Android, Samsung AIS (provider) PC Access? In my days of hours spent diagnosing my phone from dozens of format resets I'm currently at the belief the problem is with both Android and Samsung Software. Both app databases have been remotely accessed and manipulated into remotely initiating downloads to the phone that take over control. 35gb, Wi-Fi and Data mostly by Android Systems and Galaxy Apps.

Going back to All Permissions Tab on the Galaxy Store. At least 3 dozen new Permissions and altered original. The most compelling for point are:

have full network access:

Description: Allows the app to create network socketsand use custom network protocols. The browser and other applications provide means to send data to the internet, so this permission is not required to send data to the internet. 

view Wi-Fi connections:

Allows the app to connect and disconnect from Wi-Fi access points and to make changes to the device configuration of the Wi-Fi network.

com.samsung.android.samsung.account.permission.ACCOUNT_MANAGER

Description: blank

connect and disconnect from Wi-Fi:

Description: Allows the app to connect and disconnect from Wi-Fi access points to make changes to the devices configuration for Wi-Fi networks. 

view network connections:

Description: 

Allows the app to view information about network connections such as what networks exist and are connected.

change network connectivity:

Description: Allows the app to change the state of network compatibility 

receive data from the internet:

Allows apps to accept direct cloud to device messages sent by the app's service. Using this service will incur data usage. Malicious apps could cause excessivue data usage.

Basically, God Mode enabled. Further investigation showed all Samsung associated apps are modified versions, most with incorrect current version. Many optional Samsung apps were downloaded. Some the icon was off/different, different language for icon name and 2 mispelled. Added apps: Smart Things, Members, Ultra Data Saving and several sharing associated.

Using an app diagnosis app it showed every app was granted complete admin access, even Weather was given pages of admin control. So basically once inside the software the hacker has unlimited options to maintain or regain remote access to the phone. 

Probably 5-8 thousand words of new code written into system boot.

I have created a file set up as a walk through with pictures, outlining from initial setup to complete control to the best of my ability. Given enough time using forced downloads to the system without user interaction the running system software will be completely rewritten until authority granting aithority to the bios and hard copy of rom is replaced.

I've contacted Samsung and using Tutor App a representative witnessed these settings and agreed with my observations and results. He urgently directed me to the local Samsung Service Center. I explained that I had already gone once with no results.

The staff including techs also shown the evidence and replied they aren't equipped or educated to handle this situation, telling me to call customer service for assistance. 

Between Customer Service in person or Digitally, both "responsibility dump" on each other for assistance. 

I don't know what other options I have left. I'm eager to learn how to combat this. It's effecting my life in multiple ways limiting what I'm able to do.

I

[TungjaiSupportAgent]

We apologize for this inconvenience. Please give more information
- Name
- Mobile Number
- Serial No.

I will send to whom concern about this and call back to you. Sorry for inconvenience.

[Kisorsosay]

Samsung Members app is denying me to direct message you because I'm obviously not going to put all my personal information out here.

[TungjaiSupportAgent]

You can send about your information to inbox Fanpage Samsung at link  https://web.facebook.com/SamsungThailand/ 

and click menu "Ask and Help" wih your information and link your Post , Thank You.

[Kisorsosay]

I'm barely able to stay online and away from linking anything to my phone with this going on. Galaxy Store even added some more permissions.

If you're a representative of Samsung why can't you give them this post and they can locate all my contact information in my profile?

[TungjaiSupportAgent]

Sorry for inconvenience , May I have more information about Name and Mobile number for send to whom concern call back to you.