RatHat ADB Self-Pairing via Accessibility Service for Persistent Shell Access
Detects the usage of Android Debug Bridge (ADB) commands associated with wireless debugging, such as pairing or connecting to devices over a network. This behavior can be used by an adversary to gain remote access to an Android device or manage it remotely.
CQL
