Renting Android Malware Is Getting Easier and Cheaper

This report describes a growing Android malware-as-a-service ecosystem (notable examples: PhantomOS and Nebula) that lets low-skilled criminals rent or buy turnkey spyware and banking trojans with features such as silent app installs, SMS/2FA interception, phishing overlays, and Play Protect evasion; it also covers distribution toolkits (ADB/exploit kits), crypters, and install markets selling pre-compromised devices, enabling large-scale, low-effort fraud and surveillance campaigns.