Oct 16, 20267 min
A 1-click lead remote screen capture
A bundled analytics SDK (ByteDance RangersAppLog) ships a hidden screen-streaming tool whose launcher is exported and permission-less. One tapped link sets its server via an unvalidated url_prefix, redirecting the stream to the attacker: full screenshots every ~1.4s.
AndroidDeeplinks