Malware fakes the sequence a user sees when they shut off their Android phone. The malware mimics the shutdown animation and appears to be off. It can make outgoing calls, take pictures and perform many other tasks without notifying the user. It is unlikely to show up in Google’s Play Store, but it could be a candidate for third-party app stores with looser restrictions. It requires an Android device to be “rooted” or modified to allow deep access to its software.”]
Source: https://www.csoonline.com/article/2886979/android-malware-fakes-phone-shutdown-to-steal-data.html