iRecorder was a legitimate app made available on Google Play Store in September 2021. A remote access trojan AhRat was most likely added to it a year later.
"Multiple lines of Android devices came with preinstalled malware," reports Ars Technica, "that couldn t be removed without users taking heroic measures."
Their article cites two reports released Thursday — one from Trend Micro and one from TechCrunch: Trend Micro researchers following up o.