An Accessibility Service is an Android framework intended to help users with disabilities. It can read screen content, observe user interface events, and perform actions such as clicking buttons, scrolling, or entering text on behalf of the user.
This makes it a high-value target for malware. If a user is tricked into enabling the service for a malicious app, the app may gain broad control that goes well beyond normal permissions. Attackers use that access to automate taps, hide prompts, steal information from the screen, and manipulate other apps. Defenders watch for unnecessary accessibility access, especially in sideloaded or suspicious apps, and should treat any request for this permission as sensitive.



