Glitch SPY RAT Abuses Android Accessibility Service for Full Device Control

Gbhackers •Mayura Kathir • July 1, 2026

An emerging Android remote-access trojan platform, tracked as Glitch SPY, that leverages a fraudulent Polish apartment-rental website to trick victims into sideloading a malicious APK. The dropper, identified as the Brokewell Android Loader, presents a plausible rental-app experience while secretly installing Glitch SPY and coercing users to enable Android Accessibility Service an abuse that gives […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Glitch SPY RAT Targets Android Users via Fraudulent Rental Platform A new Android Remote Access Trojan (RAT) named Glitch SPY has emerged, exploiting a fraudulent Polish housing rental website to distribute a malicious APK. This malware, delivered through the Brokewell Android Loader, abuses the Android Accessibility Service to gain full control over infected devices. Once installed, Glitch SPY establishes a persistent connection to its command-and-control server, allowing the attackers to execute over 70 commands remotely. Zimperium has confirmed that their Mobile Threat Defense solutions can detect both the dropper and the Glitch SPY payload without requiring updates. The attack primarily targets Android users who unknowingly sideload the malicious application. Current reports indicate that Zimperium clients are protected against this threat, highlighting the importance of mobile security solutions. The malware's modular architecture allows for rapid customization and distribution across various campaigns. 2 sources 74

Extracted Entities

Glitch SPY RAT Abuses Android Accessibility Service for Full Device Control

The full story

Extracted Entities

Attack Types (2)

Malware (2)

Platforms (1)