“BTMOB” RAT Demonstrates Deep Persistence on Android Devices

The report describes BTMOB, a sophisticated Android remote access trojan that leverages accessibility services and advanced evasion to maintain deep persistence on infected devices, enabling credential theft, screen monitoring, remote commands, and ongoing surveillance; researchers note it can remain hidden while continuously collecting sensitive data from financial, messaging, and personal apps and recommend behavior-based monitoring, strict permission controls, and continuous mobile threat detection.