Android app granted Accessibility Service or Notification Listener access

Shadows VMB@Vemorian_Mort

•updated Aug 20, 2026•2•0•4

Detects when a non-system application on an Android device is granted Accessibility Service permissions or Notification Listener access. Malicious actors frequently abuse these permissions to perform overlay attacks, keylogging, or intercepting sensitive information such as 2FA codes.