It's been a little over a year since the last time I wrote about phone security, and in that time we've seen a number of high-profile hacks and attacks. The most recent was the WannaCry ransomware attack, which affected over 200,000 people in 150 countries. While WannaCry was a serious attack, it was also a wake-up call for many people who didn't realize how vulnerable their devices are. In the wake of the attack, there were a number of articles (including this one from Forbes) that tried to answer the question: can phones be hacked if they are turned off?

The short answer is yes, phones can be hacked if they are turned off. However, it's important to understand how this works and what you can do to protect yourself.

When you turn off your phone, it doesn't completely power down. Instead, it goes into a low-power mode where some functions are still active. This includes the ability to receive text messages and phone calls, as well as connect to the internet.

This low-power mode is necessary so that your phone can still receive important messages and calls, but it also means that your phone is still vulnerable to attack.

HACKING METHOD

There are a number of ways that hackers can exploit this low-power mode to gain access to your device. One popular method is known as a 'boot loader attack.' This type of attack allows hackers to inject malicious code into your phone's bootloader, which is responsible for loading the operating system.

Once the malicious code is injected, it can give the hacker full control of your device. They can then do anything they want, including installing malicious apps, stealing your data, or using your phone to send spam text messages.

Another popular method for hacking into phones is known as a 'man in the middle' attack. This type of attack takes advantage of the fact that your phone will still connect to the internet when it's in low-power mode.

Hackers can use this connection to intercept your traffic and steal your data. They can also use it to inject malicious code into your phone that can take over your device.

PRECAUTIONS

The best way to protect yourself from these types of attacks is to keep your phone up-to-date with the latest security patches. Manufacturers are constantly working to close these types of vulnerabilities, so it's important to install these updates as soon as they are available.

You should also be careful about what you install on your phone. Only download apps from trusted sources, and be sure to read the permissions before installing anything.

If you're concerned about your phone's security, there are a number of steps you can take to protect yourself. 

First, consider using a security app like Lookout or Avast. These apps can help to detect and block malicious apps and websites.

You can also enable two-factor authentication on your accounts, which adds an extra layer of protection. Finally, make sure to back up your data regularly so that you can restore it if your phone is lost or stolen.

While it is possible to hack a phone that is turned off, it is not an easy task. The best way to protect your phone from being hacked is to keep it turned on and locked.