Accessibility service the Dangerous feature of Android

Android's Accessibility service is the most abused Feature by Hackers After Analyzing few Popular Android Banking botnets ( including Anibus, Teabot, Flubot) Families, We tried our best to share our Research Here What you have to know about the evil features and safeguard yourself from those type of malwares

[{"selector":"#anim-324b65df-1f4d-43ae-893a-2e80aed78ddb","keyframes":{"opacity":[0,1]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"both"}] [{"selector":"#anim-406a6e7f-e615-499f-ad46-ffba9ea70695","keyframes":{"transform":["scale(0.3333333333333333)","scale(1)"]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"forwards"}]

Android's Accessibility service is a feature for The people with disabilities using Android Smartphone It can perform actions behalf of the users

[{"selector":"#anim-d6d75b0b-6abd-43cf-8b9d-e6c14efe66ca","keyframes":{"opacity":[0,1]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"both"}] [{"selector":"#anim-5cc76022-61f8-4678-bbe8-7269ce0ae130","keyframes":{"transform":["scale(0.3333333333333333)","scale(1)"]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"forwards"}]

Can be used as Keylogger

[{"selector":"#anim-263447f0-4fd5-43b6-bbf8-2e45980fdc8d","keyframes":{"opacity":[0,1]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"both"}] [{"selector":"#anim-23def50c-0d26-4230-86ad-9aca9a5ce55a","keyframes":{"transform":["scale(0.3333333333333333)","scale(1)"]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"forwards"}] [{"selector":"#anim-d6eabe55-636f-412d-ab08-78abb914cde8","keyframes":{"opacity":[0,1]},"delay":200,"duration":900,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] Multiple Blue Rings Accessibility Service tracks every event on your device, including touches, input fields

Can be used as auto clicker

[{"selector":"#anim-e558a219-2fba-42b6-aaaf-fe24dc074827","keyframes":{"opacity":[0,1]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"both"}] [{"selector":"#anim-7c0d1539-2dda-4b85-8e0f-f01dc9302641","keyframes":{"transform":["scale(0.3333333333333333)","scale(1)"]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"forwards"}] [{"selector":"#anim-93623d4e-027f-4fdc-860a-e4640db8a5d5","keyframes":{"opacity":[0,1]},"delay":200,"duration":900,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] Multiple Blue Rings Accessibility Service can perform action, it can click on ads or can gain permission privileges, redirect users to fraud sites

On Device Fraud

[{"selector":"#anim-68b7d31e-5240-4f38-9abf-2db8e0c288ff","keyframes":{"opacity":[0,1]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"both"}] [{"selector":"#anim-9efc84c7-6664-42c5-bebf-c2f9a707d363","keyframes":{"transform":["scale(0.3333333333333333)","scale(1)"]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"forwards"}] [{"selector":"#anim-3124fc8d-80e1-4de1-8f0a-511426248c1e","keyframes":{"opacity":[0,1]},"delay":200,"duration":900,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] Multiple Blue Rings Accessibility Service can perform malicious actions, and do on device fraud, without user's notice

It Can Be Abused As

[{"selector":"#anim-b70bc6cd-68bd-4cbb-823b-a3064824c018","keyframes":{"transform":["translate3d(-121.93309%, 0px, 0)","translate3d(0px, 0px, 0)"]},"delay":150,"duration":900,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-6556ebca-9d0f-4d3f-834c-7ba7d2610a5b","keyframes":{"opacity":[0,1]},"delay":150,"duration":900,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-4bd06242-cb8d-4fa8-bcac-d10e92a6f54f","keyframes":{"transform":["scale(0.15)","scale(1)"]},"delay":150,"duration":900,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"forwards"}] [{"selector":"#anim-d8022bd3-9276-43ba-9625-fb6d53f43100","keyframes":{"transform":["translate3d(131.59852%, 0px, 0)","translate3d(0px, 0px, 0)"]},"delay":300,"duration":900,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-f531e7d8-f0d1-4d62-904e-c52bc8855c09","keyframes":{"opacity":[0,1]},"delay":300,"duration":900,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-c9d7ed0d-698f-4d09-b050-51543365998a","keyframes":{"transform":["scale(0.15)","scale(1)"]},"delay":300,"duration":900,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"forwards"}] [{"selector":"#anim-938688b1-3185-4705-9ba5-eac80b939cd3","keyframes":{"transform":["translate3d(-121.56134%, 0px, 0)","translate3d(0px, 0px, 0)"]},"delay":400,"duration":900,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-e1e99519-ff32-4402-ab3b-33201ac12cd3","keyframes":{"opacity":[0,1]},"delay":400,"duration":900,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-75493cf0-c99f-4e1e-98ef-3c6110637783","keyframes":{"transform":["scale(0.15)","scale(1)"]},"delay":400,"duration":900,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"forwards"}] [{"selector":"#anim-fd757361-b53c-48ee-ad15-093cd698457c","keyframes":{"transform":["translate3d(113.82636%, 0px, 0)","translate3d(0px, 0px, 0)"]},"delay":500,"duration":900,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-64e23c5c-7446-4fbe-b4aa-25a25480b25c","keyframes":{"opacity":[0,1]},"delay":500,"duration":900,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-6913c771-3fea-415d-8c18-bc82802f2da2","keyframes":{"transform":["scale(0.15)","scale(1)"]},"delay":500,"duration":900,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"forwards"}] [{"selector":"#anim-fce76d4f-5607-4393-aba4-b3011086b064","keyframes":{"transform":["translate3d(-121.93309%, 0px, 0)","translate3d(0px, 0px, 0)"]},"delay":700,"duration":900,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-04c2537d-4660-4c29-97e5-288c7cd9ed58","keyframes":{"opacity":[0,1]},"delay":700,"duration":900,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-0c4b3a8b-6647-4538-ae96-942127a0f5c4","keyframes":{"transform":["scale(0.15)","scale(1)"]},"delay":700,"duration":900,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"forwards"}] [{"selector":"#anim-159aed16-c516-4583-ad2f-6d7d608d8e36","keyframes":{"transform":["translate3d(131.59852%, 0px, 0)","translate3d(0px, 0px, 0)"]},"delay":800,"duration":900,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-865e616e-7385-4855-b2b8-4b7fbe21f9e3","keyframes":{"opacity":[0,1]},"delay":800,"duration":900,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-9d48108a-300d-47d5-bcd5-5fb1fe39c6fd","keyframes":{"transform":["scale(0.15)","scale(1)"]},"delay":800,"duration":900,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"forwards"}] We have seen these evil features on almost all android banking malwares

Android 13 Will Fight for this feature

[{"selector":"#anim-577335eb-5dc1-488d-9fd0-1059a4cffb39","keyframes":{"opacity":[0,1]},"delay":200,"duration":900,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] Android 13 will limit the abuse of this feature, Google Taking it too seriously suspending the developers from Play store If your Device is infected with this type of malwares then you can remove them with ADB or any Third party package uninstaller

Other Stories

[{"selector":"#anim-1e5f8bc1-f65d-4646-a0e7-c2c3d53b788a","keyframes":{"opacity":[0,1]},"delay":0,"duration":1200,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-cc60edb5-912a-4ce6-8a43-b1b24535fc1d","keyframes":{"opacity":[0,1]},"delay":0,"duration":1200,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}] [{"selector":"#anim-a79bd681-47ca-4933-b344-964dc9a1e0bf","keyframes":{"transform":["translate3d(0px, 456.03177%, 0)","translate3d(0px, 0px, 0)"]},"delay":0,"duration":1200,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}] [{"selector":"#anim-066ce56b-2b09-4455-ae10-96711d35d104","keyframes":{"opacity":[0,1]},"delay":0,"duration":1200,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}] [{"selector":"#anim-41dfbc6c-bd1f-4543-a35a-813dade2aeb4","keyframes":{"transform":["translate3d(0px, 900.67268%, 0)","translate3d(0px, 0px, 0)"]},"delay":0,"duration":1200,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}] [{"selector":"#anim-218b72bb-a5dc-41a6-b9ae-000ad534a6c3","keyframes":{"opacity":[0,1]},"delay":0,"duration":1200,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}] [{"selector":"#anim-49dbf072-e1f5-498c-a23a-4b33b241e645","keyframes":{"transform":["translate3d(0px, 1200.82354%, 0)","translate3d(0px, 0px, 0)"]},"delay":0,"duration":1200,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}] [{"selector":"#anim-905da882-d17b-4903-b42e-a792c38997a1","keyframes":{"opacity":[0,1]},"delay":0,"duration":1200,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}] [{"selector":"#anim-6a214ebd-db51-4d5b-90be-0d58c93d170b","keyframes":{"transform":["translate3d(0px, 240.31753%, 0)","translate3d(0px, 0px, 0)"]},"delay":0,"duration":1200,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}] [{"selector":"#anim-317031c7-2849-4ada-b0b6-6598d5f7fda9","keyframes":{"opacity":[0,1]},"delay":0,"duration":1200,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}] [{"selector":"#anim-23039d42-6897-4f2e-aee9-8d533bb09b0f","keyframes":{"transform":["translate3d(0px, 641.56418%, 0)","translate3d(0px, 0px, 0)"]},"delay":0,"duration":1200,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}] [{"selector":"#anim-b55c2653-59f0-4f53-9030-5f6582945e92","keyframes":{"opacity":[0,1]},"delay":0,"duration":1200,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}] [{"selector":"#anim-837ff4b3-abb9-4044-a723-cad195124221","keyframes":{"transform":["translate3d(0px, 443.09723%, 0)","translate3d(0px, 0px, 0)"]},"delay":0,"duration":1200,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}] [{"selector":"#anim-f5f8f1d9-c79d-47c4-877a-51480bf95c24","keyframes":{"opacity":[0,1]},"delay":0,"duration":2000,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] Story 1 Story 2 ..................................................

Accessibility service the Dangerous feature of Android

Android's Accessibility service is a feature for The people with disabilities using Android Smartphone It can perform actions behalf of the users

Can be used as Keylogger

Can be used as auto clicker

On Device Fraud

It Can Be Abused As

Keylogger

Escalate its permissions

Perform on device fraud

Prevent user from Uninstalling it

Disable Anti virus or Play protect

Even more

Android 13 Will Fight for this feature

Other Stories

Uber was Hacked

Signal was Breached