Malicious Android APK credential harvester: accessibility, SMS, overlay

Duo Tech@duotech

•updated Jul 1, 2026•0•0•5

Detects Android APK files that contain a combination of suspicious permissions and features often used for credential harvesting, specifically the binding of an accessibility service, SMS interception permissions, and overlay capability (System Alert Window).