Last night someone remotely controlled the browser of my Nokia Lumia 900. I was basically able to watch how the attacker clicked on different links and browsed different websites.
This happenend while I was connected to a local wifi and watched some youtube-videos on the device. Although I switched off the wifi-connection, the attack continued when the phone had a data connection with the mobile network. This suggests to me that the mobile network of my telephone provider was used for the attack and not the wifi-connection.
As an immediate measure, I did a factory reset of the phone, put a password to lock the screen and removed the sim-card, but I am afraid this is not enough. I am thinking about getting a new phone number.
The strange thing is that only a handful of people know my mobile number and the model, which suggests that the attacker knows me as I did not install suspicious applications or download random files with the phone.
I would like to know what I can do to secure my phone in order to prevent future attacks. Thanks for your advice.