Vishing, Mishing Go Next-Level With FakeCall Android Malware

A newly observed variant of FakeCall — an Android malware used in vishing/mishing fraud — expands its capabilities beyond call interception to abuse Accessibility Services for UI control and data capture, monitor Bluetooth and screen state, and maintain persistent spyware behavior; infections occur via malicious APKs that set the app as the default call handler, enabling call hijacking, AitM attacks, audio/video exfiltration, and identity fraud. Researchers warn this evolution increases stealth and enterprise risk, and recommend limiting app sources, scrutinizing app permissions, and training staff to recognize mobile phishing.