ESET found a new Android malware strain called DEFENSOR ID that channels its malicious activity through a devices Accessibility Services. This privilege enabled the malware to perform 17 commands received from the attacker, including launching an app and performing a click action remotely instructed by its handlers. The malware also gave attackers the ability to steal access to and subsequently empty a victim’s cryptocurrency wallet or banking account. Security professionals can help defend their organizations against Android malware by creating security policies around the use of mobile devices.”]

