I'm dropping GhostTouch v2.0. Not a skid-modified version of SpyNote. Not a rebrand of AhMyth. This is custom-coded in Kotlin + Native C for the low-level shit.
Why is this different?
1-Click Install – Victim clicks ONE link. That's it. No "allow from unknown sources". No "install anyway". It uses a WebAPK + overlay trick that makes it look like a legit Google update.
Google Play Protect? – LOL. It passes EVERY TIME. I'm not even kidding. I submitted it to VirusTotal 3 times. 0 detections. It's signed with a valid leaked OEM certificate.
Full Screen Share – Not that garbage "take screenshot every 2 seconds". I'm talking LIVE MIRRORING. You see their screen in real-time, 30 FPS. Swipe, type, open apps – you're watching like you're holding the phone yourself.
Is it possible to automatically enable accessibility permissions without any manual intervention? I can't imagine how that's possible!
any test ?
do you have any new rat?