UI automation abuse is the misuse of interface-control features that let software act on a user’s behalf. On mobile and desktop platforms, these features can read screen state, trigger taps and clicks, fill forms, dismiss prompts, or navigate apps without direct human input. That makes them valuable for accessibility and testing, but dangerous when exposed to untrusted apps.
In cyber security, this abuse matters because it can turn legitimate permissions into fraud tools. Attackers may use UI automation to bypass consent dialogs, steal one-time codes, approve payments, scrape on-screen data, or run bot-like actions at scale. On Android, accessibility services are a common target because they can observe and control the interface, which is why defenders treat them as a high-risk trust boundary. Hardening measures include restricting access to verified assistive apps, reducing sensitive UI exposure, and monitoring for suspicious automation patterns.