'Cellik' Android RAT Leverages Google Play Store

The report describes Cellik, a commercial Android RAT-as-a-service that wraps payloads in legitimate Play Store apps and offers features such as full remote device control, screen streaming, keylogging, notification and OTP capture, file system and cloud access, malicious overlay injection, and an automatic APK builder to facilitate sideload distribution; it highlights Play Protect evasion claims, low cost of access for attackers, and recommended defenses like avoiding sideloading and using endpoint/mobile security.