Common Android Threats
- Banking trojans (e.g. Anubis, Cerberus lineage): abuse the Accessibility Service to read screens, log keystrokes, and draw fake overlay login screens on top of real banking apps; intercept SMS OTPs.
- Spyware / stalkerware: covert tracking of location, messages, calls, mic/camera — often installed by someone with physical access.
- Adware / fleeceware / fake apps: repackaged legit apps with added malicious code (a reason to avoid third-party stores).
- Common tricks: request Accessibility, hide the icon, abuse device-admin to resist removal, fetch payloads after install.
Key Takeaway
On Android, dangerous permissions plus Accessibility abuse are the loudest signals — start every APK triage at the manifest.