important · Mobile — Android
Accessibility-granted RatHat turns local Wireless ADB into an uninstall-resistant shell that can recover the screen lock.
Affects
Android phones on which the RatHat APK is installed and granted Accessibility Service control.
After sideloading and an Accessibility grant, RatHat enables Wireless Debugging, reads its pairing code and port, and self-pairs an embedded ADB client.
Detail and 3 sources
Its native payloads remain after APK removal, can reinstall the app, and read raw input events containing the unlock PIN or pattern; no platform patch is available.