$300 a Month Android Malware ‘Oblivion’ Uses Fake Updates to Hijack Phones

Certo researchers report on a new Android RAT called Oblivion that is being openly sold for subscription fees and can silently obtain Accessibility permissions via fake system update prompts to perform keylogging, SMS theft, live screen viewing, remote unlocking, and large-scale victim management; it targets modern Android versions and OEM custom skins and includes an APK builder to help attackers evade detection.