Tip: refuse Accessibility Service prompts from streaming or "Google Play Services" lookalikes, and uninstall the app
- On Android: Settings → Accessibility — remove unknown services; treat Cyrillic-homoglyph "Google Play Services" entries as malware.
- Do not sideload APKs from ads inside low-reputation streaming apps.
- Banking SOCs: escalate fraud alerts that coincide with screen-sharing / remote-control telemetry on the same device.
Sources: Group-IB: Mirax Android DTO (Nov 5)