Discovered that last week my phone was remotely controlled / hacked. The hacker intentionally left evidence that he entered my phone, like saving a screenshot and making a shopee purchase (that was later cancelled as it was not paid).

Not sure what else he did on my phone.

Need advice. What should I do now to secure my phone? I looked through my apps list and didn't find anything suspicious. Also, there doesn't seem to be suspicious data usage during that period when he accessed my phone.

I downloaded a bunch of anti-malware / anti-spyware apps and scanned my phone, but nothing came up.

I am thinking of changing passwords for my more important accounts like google and such, and I am concerned he may have installed something on my phone to capture what I key in (maybe that's why he left evidence that he entered my phone.. to prompt password change).

The nuclear option would be to factory reset my phone but at the moment, there are some important work-related apps on my phone that makes that difficult.

Also, I read that my sim may also be compromised. Should I change to a new sim?