Glitch SPY Android RAT Spreads Through a Fake Polish Rental App

Cyble Research uncovered Glitch SPY, a modular Android RAT pushed from a fake Polish rental site via the Brokewell loader; after sideloading it abuses Android Accessibility to gain near-total control and supports over 70 commands including screen streaming, keylogging, SMS/contacts theft, a crypto-clipper, and a hidden remote browser that enables account takeover and financial fraud. The report covers delivery and infection details, builder/admin panel evidence indicating a reusable platform, and defensive guidance (deny unknown sources, avoid sideloaded APKs, review Accessibility permissions and keep Play Protect enabled).