[TomSands]

Hello,

I've a question about security of Samsung Secure Folder in Android 11 - stock software, phone is not rooted.

I always thought that the Secure Folder is a container that is totally isolated from the rest of the system, until I found out that installing an app within secure folder (in this case Kasperky Internet Security) gives the app the following permissions:

1. Kaspersky app can automatically start with the system. After restarting the phone without entering Secure Folder password, somehow Kaspersky manages to autostart itself even though the Secure Folder wasn't unlocked after starting the system. I can see it as the app is displaying its banners. How is it able to start automatically with the secure folder being locked?

2. The Kaspersky app that should run only within secure folder is able to scan system-wide settings outside of secure folder. The app has a feature called weak settings scan and it's somehow able to detect a lot of system-wide settings - like password visibility, developer options being enabled etc.It's also able to read the main, non-secure folder Google account used for the phone. How does it do this?

The above permissions given to the apparently secure folder-installed app indicates that there's a very limited isolation provided by Secure Folder.
Could you please clarify how the app is able to do the above things?
Is secure folder really secure? Would installing a malicious app in SF limit the infection to SF only?

Thanks

[ramzes666]

What happened to your previous security certificate? Are you sure you need it, because the old security certificate may still work well

[AngelaJohnston]

The fact is that the problem lies not in the secure folder, but in the antivirus itself. Current antiviruses are not reliable at all and practically do not protect your computer from malicious viruses, but on the contrary can harm your computer with unnecessary files and applications. Also, when installing any antivirus, this antivirus automatically charges itself the rights to use various computer functions. I advise you to check your antivirus on penetration testing sydney and see how it will behave. However, it is best not to waste time checking this antivirus, just remove it and forget about it forever. Stock antivirus from Windows easily copes with all threats and viruses. An additional antivirus was never needed. Good luck mate!