Why you shouldn't trust "safe" spying apps!

Zscaler ThreatLabZ discovered SPYMIE, a malicious Android keylogger previously available on Google Play that leverages Accessibility Services to capture keystrokes and UI actions, hides itself behind a dialer-triggered PIN (default **00##**), writes sensitive data to SpyLogger.xml and logcat (insecure storage), and includes code to email collected data (including a hard-coded recipient). The app had 10,000+ installs, was removed from Google Play after reporting, and poses a significant privacy risk to users of infected or borrowed devices.