Remote device control is a malware capability that lets an attacker operate an infected phone or computer from a distance, almost as if they were holding it. The operator can open apps, read screens, approve actions, send messages, move through menus, or trigger other malicious functions without touching the device directly.
This matters because remote control turns a compromise into an active intrusion. In mobile attacks, it can be used to intercept one-time passcodes, approve payments, hide fraud by navigating banking apps, or keep surveillance running while other payloads encrypt files or steal credentials. Defenders look for unusual accessibility service abuse, device administrator enrollment, overlay behavior, suspicious APKs, and outbound command-and-control traffic. Limiting sideloading, reviewing app permissions, and enforcing mobile device management controls can reduce the risk of remote takeover.