I was using RedReader, and all of a sudden Hypatia gives me a notification saying “Malicious link detected: thecounter[.]org”
I wasnt even in a web browser. What does this even mean? To my knowledge I was not on this domain. I dont even know what it is. Is my device compromised? What does it mean by malicious link?
You should uninstall Hypatia, as it is no longer maintained, see: News - DivestOS Mobile
As for your question, Hypathia probably just noticed your device tried to access a link on its blacklist and notified you. Maybe someone on reddit posted a link to it? I wouldn’t give it too much thought honestly.
P.s. if you are concerned, then it would just reboot the phone to let the verified boot functionality do its thing, a lot of variants android malware does not persist across reboots.
2 Likes
Thanks, i will do that.
Are there any additional scanners i can use in GrapheneOS that can give me a second opinion?
You can ask the GrapheneOS forums, but my guess is that they consider any antimalware service to be
1- unnecessary for their operating system
2- a form of badness enumeration, which they consider to be not real security. They would probably link you something from the PrivSec website or something that Tommy Tran said. Badness Enumeration | PrivSec - A practical approach to Privacy and Security