PromptSpy AccessibilityService abuses global BACK action to block Settings/uninstall
Detects unauthorized usage of the Android AccessibilityService 'performGlobalAction' to trigger a 'BACK' operation specifically when the Android Settings application is active. This behavior is indicative of malicious applications attempting to obstruct user attempts to reach the Settings menu to uninstall a malicious package.
Sigma
