RatHat Go agent silent APK reinstall after app uninstall
Detects evidence of persistent Android malware attempting to maintain access. It identifies the execution of a hidden Go-based daemon masquerading as a shared library in temporary storage, silent reinstallation of malicious APKs using package installer flags, and automated re-granting of accessibility services to bypass user interaction requirements.
Splunk (SPL)
