Capturing every keystroke, including passwords and private messages.

Users are prompted to download a "Chrome Update" or "System Security Patch" from a third-party site.

Full access to download, upload, or delete files on the internal and external storage.

Regularly check which apps have "Accessibility" or "Device Admin" rights.