An out-of-band channel is any communication path that bypasses the normal internet connection. On mobile devices, this can include Bluetooth, NFC, nearby-device links, or other short-range radios that move data separately from Wi-Fi or cellular traffic. Because the traffic does not follow the usual network route, it can avoid controls that only inspect web requests, DNS, or firewall logs.
In cyber attacks, out-of-band channels are useful for stealthy data transfer, device pairing abuse, command delivery, or relaying information between nearby compromised devices. They matter in mobile security because an “offline” phone may still be exposed if a malicious app can use local radios or a trusted workflow to pass data onward. Defenders look for unusual permission use, unexpected pairing activity, suspicious proximity-based behavior, and policies that restrict short-range communication on sensitive devices.