A user receives a notification indicating the data plan on the user's corporate phone has reached its limit. The user has also noted the performance of the phone is abnormally slow. A technician discovers a third-party GPS application was installed on the phone. Which of the following is the MOST likely cause?

The combination of excessive data consumption (reaching the plan's limit) and abnormally slow performance are classic symptoms of malware on a mobile device. Malicious applications frequently run processes in the background to exfiltrate sensitive data, communicate with command-and-control (C2) servers, or participate in botnet activities. These unauthorized actions consume significant system resources like CPU and memory, causing the device to slow down, and utilize network bandwidth, leading to unexpectedly high data usage. The installation of a third-party application is a common vector for such infections.

A. Software updates are typically occasional events and would not cause the persistent slow performance and massive data consumption required to exhaust a monthly plan.
C. Updating map data can use a lot of data, but it is generally a one-time download or a periodic event, not a continuous process that also causes constant device slowness.
D. A software conflict with the built-in GPS might cause performance issues or app crashes, but it does not provide a direct explanation for the excessive data usage.

1. Google, Android Help. "Check for & remove malware from your Android device." In the section "Signs you have a harmful app on your phone," Google's official documentation lists "Your phone uses more mobile data than it used to" and general performance degradation (e.g., battery drain, which is linked to high resource usage) as primary indicators of malware.

2. University of Washington, Paul G. Allen School of Computer Science & Engineering. CSE 484: Computer Security, Lecture 18: Android Security. This courseware explains that malicious applications can perform actions such as "exfiltrate private data" and "record conversations," which require significant data transfer and background processing, leading to high data usage and poor device performance. (See slide 31, "What Can Malicious Apps Do?").

3. Al-Garadi, M. A., et al. (2020). "A Survey of Android Malware Detection and Mitigation Techniques." ACM Computing Surveys, 52(6), 1-44. This peer-reviewed article details common malware behaviors, including "Data Leakage" where malware steals and transmits user information to remote servers, directly causing high data usage. The article also implicitly covers performance impact due to the resource consumption of these malicious background activities. (See Section 3.1, "Malware Behaviors"). DOI: https://doi.org/10.1145/3365545