A decoy apartment site, a dropped APK, and a loader chain that turns a simple lure into a mobile account-abuse risk.
A fraudulent rental-themed lure, a sideloaded APK, and a request for Accessibility Service show how mobile malware can turn a helper feature into a control plane.