The Android accessibility (a11y) service is widely abused by malware to conduct on-device
monetization fraud. Existing mitigation techniques focus on malware detection but overlook …