The infection chain starts with a dropper designed to bypass Android security restrictions. It tricks victims into granting Accessibility Services ...
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
